Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: IxALx/QXIsjV5LTBS/0dZimXYH5og69Qc17ODPxLYQo=
Subject key identifier: EB:1C:10:A3:A5:38:AC:0D:9F:0A:3F:16:F1:6E:30:A2:D6:90:D8:3A
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 019747428DBCFB79A64C670CC5FB6FE386F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 11A2
Signing time: Fri 06 Jun 2025 22:00:33 +0000
Manifest this update: Fri 06 Jun 2025 22:00:33 +0000
Manifest next update: Sat 07 Jun 2025 22:00:33 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: p9xI54zMmwkTfTHhjnhjpjxHRJtIEvqsbAuzycsJQpQ=)
2: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:8d:bc:fb:79:a6:4c:67:0c:c5:fb:6f:e3:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jun 6 22:00:33 2025 GMT
Not After : Jun 7 22:00:33 2025 GMT
Subject: CN=eb1c10a3a538ac0d9f0a3f16f16e30a2d690d83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:4e:e9:dd:65:0c:ee:38:8e:e5:de:96:2b:
a9:e0:27:e8:07:ad:c4:7a:3e:4b:65:24:c9:16:b6:
30:38:7b:9a:95:84:48:e4:48:1e:81:02:ae:63:85:
6d:71:2f:8d:b9:4d:a4:9f:5d:49:e0:46:fa:4b:82:
93:e2:45:97:6d:fc:eb:1d:39:49:0a:68:1a:3b:95:
33:99:61:d6:ec:20:56:30:7f:68:0d:dd:82:15:b3:
c4:90:f0:e0:1b:44:45:98:83:34:14:e9:32:e1:a7:
a6:76:4b:2e:1a:e0:6e:6a:21:ea:49:6c:ba:b1:b8:
08:75:5c:6f:af:8a:58:4f:62:6d:6f:ee:6e:9b:c7:
7d:50:23:3f:39:c7:e7:f3:e9:3a:35:d5:dc:74:62:
74:a2:8d:e3:c9:97:cc:3c:46:ea:ef:24:6d:2c:b6:
de:d9:db:1b:93:90:5d:65:ec:1d:73:31:aa:25:15:
bd:bb:72:93:02:7b:d0:68:07:10:d0:88:5f:56:12:
d4:4e:25:30:58:9e:71:64:f7:41:66:40:f5:eb:ba:
30:45:8e:db:66:09:6f:11:da:63:af:d0:0a:b8:2b:
ad:7f:fe:05:6b:98:10:d8:dc:9c:c2:51:17:36:6b:
f4:86:92:0f:aa:c7:89:b9:70:0d:5a:50:32:19:82:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:10:A3:A5:38:AC:0D:9F:0A:3F:16:F1:6E:30:A2:D6:90:D8:3A
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6e:5a:d2:d7:b6:c6:34:ba:24:86:d8:07:86:40:19:bf:6b:
38:73:bb:14:39:7f:34:ef:6b:31:d3:cc:59:f4:ec:99:eb:4d:
bf:f6:4a:64:ff:15:c8:61:f0:c1:67:17:c3:8c:67:bd:bf:2f:
6e:96:a3:27:ad:79:07:da:8f:57:78:94:90:0d:ac:2f:52:82:
42:55:61:0b:57:04:24:d6:25:e3:d8:a4:5f:63:f6:6c:a9:d9:
fa:74:77:f9:44:a4:fb:5b:22:6e:23:db:7b:6f:41:63:6f:f5:
c8:cb:f2:ca:d1:c2:2f:10:97:2a:3f:81:fa:ad:c2:e3:bc:c1:
f5:1e:cc:b9:1c:23:e3:92:1b:a2:e3:5e:54:a2:b7:77:7f:8a:
c3:36:44:1c:9b:b2:d7:b0:6a:3d:03:a9:2c:64:b1:71:1a:d7:
1d:e9:bd:3d:f5:bf:78:8f:ea:3a:bc:e8:7a:e5:20:51:6e:6e:
3d:b9:e3:44:7b:f0:c2:6c:57:8c:6f:17:0b:20:f5:a9:16:2e:
51:a6:97:87:6f:9e:50:00:52:0e:46:c5:f3:3d:a7:aa:2f:89:
2e:f3:6a:86:da:7d:f0:a3:07:00:b2:f1:6b:43:34:e0:28:42:
8f:75:0e:f8:48:99:88:2b:c2:60:45:ca:a9:27:af:62:1f:e8:
f8:a2:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:13 2025 by rpki-client