Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: i8W3yOqEv4rtS6UkZN5jrRMpNZRrNjYzyJov79Y31C0=
Subject key identifier: 4F:39:E9:09:A3:8D:A0:79:81:D5:66:3C:CD:52:3B:24:AD:18:AC:D4
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 01974C321F5E7B26D28EE3E38DF7EF87C900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 09DF
Signing time: Sat 07 Jun 2025 21:00:42 +0000
Manifest this update: Sat 07 Jun 2025 21:00:42 +0000
Manifest next update: Sun 08 Jun 2025 21:00:42 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: zc/YUesTH/3zfSCeZR8p6NmOREvRQ83P/r4YJHO5Ryc=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:1f:5e:7b:26:d2:8e:e3:e3:8d:f7:ef:87:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Jun 7 21:00:42 2025 GMT
Not After : Jun 8 21:00:42 2025 GMT
Subject: CN=4f39e909a38da07981d5663ccd523b24ad18acd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:68:89:ec:16:1f:aa:2a:9e:1b:b8:df:fe:
70:d6:57:25:ac:be:33:6e:77:56:18:12:49:e4:7c:
81:2a:f8:3d:09:87:b9:ee:f9:68:2a:80:1c:2a:cc:
c1:ee:12:3b:48:eb:b5:24:c0:ab:b4:f9:07:ea:94:
a1:80:57:dc:15:35:f1:68:43:27:45:9a:0d:a4:c0:
68:4b:e8:96:46:f1:01:4e:10:63:44:7c:e9:1e:75:
13:0c:bd:67:91:90:cd:af:25:ee:63:04:51:9f:0c:
0d:57:0b:c4:39:54:84:1d:6e:c2:0c:64:5c:66:94:
4d:9d:9f:c0:82:bf:19:8a:61:b4:d4:df:90:c1:ce:
4b:59:e2:ea:2b:c1:af:28:50:b2:6e:b2:dc:9d:38:
5e:2d:e8:5f:7a:ac:6c:ca:bc:3a:94:56:32:46:cf:
09:a7:f1:02:bd:c6:b6:86:bf:2c:f2:d2:c9:28:fb:
a8:83:84:67:be:50:a2:75:8a:ea:63:fd:40:a8:13:
a1:f7:d0:21:f5:6c:91:b8:ba:43:ff:6b:c6:e3:03:
13:3d:36:8d:bf:02:68:72:cc:b3:04:1e:55:7a:10:
7c:43:22:ac:af:56:2a:1f:1a:5a:8b:95:cc:17:9b:
36:1a:5b:2d:de:11:ab:d0:f3:4d:ea:39:0f:80:9d:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:E9:09:A3:8D:A0:79:81:D5:66:3C:CD:52:3B:24:AD:18:AC:D4
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:24:a2:70:e3:c4:99:ba:d0:e1:5b:a5:77:4c:1b:18:51:31:
ee:0b:1f:83:3a:d7:ca:5d:bb:39:78:f9:95:1d:fc:27:25:99:
90:df:35:73:64:10:39:ad:af:3c:a6:58:7f:e3:2c:f1:49:ce:
ee:87:32:d8:eb:3d:6a:5c:c6:82:15:cd:d6:8a:a0:ac:e4:4b:
bf:94:68:19:a0:c6:0c:ab:20:40:e3:45:48:cf:5f:72:f5:31:
f9:67:31:ff:af:ca:91:79:bc:42:0c:87:5a:f0:aa:77:8b:f6:
4d:ef:0e:89:67:64:4b:94:83:ae:8d:b4:09:01:ba:01:47:5c:
48:d0:40:08:60:91:a3:75:ac:69:80:a5:b2:06:8d:fd:d2:ce:
ac:1b:1d:64:07:3b:bf:62:47:af:f6:43:70:1a:8d:d4:6b:57:
d9:bb:54:1b:c2:9a:3b:86:07:55:56:47:e3:71:89:ce:03:e3:
4b:58:60:01:4f:c9:a3:f3:68:f8:b3:6a:79:48:bd:5c:87:f4:
02:30:10:31:0a:41:88:de:1f:3a:2d:ea:6f:80:6e:5c:e4:cb:
7f:d7:c2:ca:81:bd:ee:b5:17:e0:e3:5f:96:ed:66:3f:be:ec:
d5:c9:8f:67:5d:6c:e1:5f:b1:3b:22:65:a0:e4:15:c0:7b:fb:
2f:7e:1e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:51 2025 by rpki-client