Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: PFfcXJAHjGFMT6ocCt3NCiu5fnTEyTNme9NP76ior6g=
Subject key identifier: EF:58:A3:89:6B:7D:7E:70:3C:2A:4E:DE:E8:76:35:D7:05:AF:1F:B3
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 0197470BA2EC60160FED476A274BDB7D40C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 0D6E
Signing time: Fri 06 Jun 2025 21:00:34 +0000
Manifest this update: Fri 06 Jun 2025 21:00:34 +0000
Manifest next update: Sat 07 Jun 2025 21:00:34 +0000
Files and hashes: 1: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: Z2JHnYAXg5l3vF8QCXC0iphMurMbGwW/IukXyGhOX1o=)
2: NfxOkyabvxkDjJyXjcgpTv_relY.roa (hash: gFCHNUeKHs4QF0iUA6YO68TkrbI25pBG+SYBY+DhWPg=)
3: x5OcpBtDjdmsNegcpqKRcYGfe4I.roa (hash: tztbQVf1Csx2bxGYr7VD6e2RtMD/c7biQ+Jk1Ftm9xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:a2:ec:60:16:0f:ed:47:6a:27:4b:db:7d:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jun 6 21:00:34 2025 GMT
Not After : Jun 7 21:00:34 2025 GMT
Subject: CN=ef58a3896b7d7e703c2a4edee87635d705af1fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:2b:69:98:2a:13:88:df:b4:99:ab:79:dc:
14:04:43:7f:4e:81:a6:37:af:c5:12:1f:5e:07:af:
59:f4:f8:6c:3e:75:1c:42:ee:90:44:a5:2d:38:2b:
d4:74:00:2b:40:b3:df:07:a0:ef:1f:02:3f:cb:ac:
e1:23:a6:16:c4:5f:65:43:0e:1c:22:3f:a1:16:95:
62:97:07:fe:2f:35:12:1a:74:32:1d:6d:77:35:67:
8f:9d:1d:8e:84:55:db:7c:8e:70:b8:4d:a7:e5:4a:
fa:9b:18:98:d7:b0:b2:85:8a:77:5e:e9:bb:15:88:
56:f9:6c:8b:4f:e5:f6:fa:e1:ca:d1:4a:31:e5:78:
b1:b0:bc:2d:ec:e9:63:07:3b:1e:86:86:0e:46:83:
a7:b9:0e:aa:f4:bf:ac:46:2a:c0:7c:97:31:22:94:
d6:5b:1b:b0:36:80:aa:6f:12:57:8e:dc:5c:5d:f2:
70:cf:8d:67:d5:4e:33:b1:11:12:38:ae:2a:6c:22:
30:71:30:82:11:1b:3b:ef:3f:42:13:c3:6b:a1:1c:
64:84:f7:2d:10:e6:ca:aa:e1:59:fc:f1:3a:bf:a8:
84:51:32:73:7a:64:45:fc:57:c7:07:e7:0b:d3:19:
a1:95:04:77:17:c3:93:a5:63:e9:72:f9:d3:7a:e4:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:A3:89:6B:7D:7E:70:3C:2A:4E:DE:E8:76:35:D7:05:AF:1F:B3
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8f:a9:31:0b:54:f1:41:3d:2a:9e:14:c7:74:f8:6c:4e:3b:
a8:71:ff:b4:c6:37:b0:35:17:47:6d:c4:98:44:ae:3f:e8:14:
b9:ba:c6:7d:ac:df:82:d9:f2:88:3d:af:ab:38:8a:14:0e:59:
64:82:94:ae:94:ab:80:70:5a:32:b3:52:b9:1d:c3:0d:a0:d9:
ac:ae:08:9e:1f:e0:90:1a:50:0f:e7:7a:29:2d:16:5b:27:a6:
c8:18:8b:55:f8:75:7e:38:8a:86:6a:74:f9:19:1d:85:6b:ba:
a9:e0:80:d8:3a:c3:99:67:08:f4:98:a8:bb:fd:6d:99:f2:cd:
d6:99:f6:66:23:08:fe:9f:58:eb:92:ae:5f:be:99:32:ab:76:
68:f1:8b:df:ca:2a:a2:ce:51:07:5e:a8:f7:9b:a2:10:58:90:
3f:73:48:f1:2c:4e:e6:39:7a:1e:31:ce:21:1d:58:5f:41:c0:
f8:0f:3a:a5:e7:51:4e:f9:25:f9:fb:f8:38:d0:13:1c:ec:2c:
f1:01:e0:ab:fb:5a:07:03:db:71:3d:54:a4:0a:8e:79:d9:9d:
9e:df:83:90:5d:f8:89:85:71:7c:11:09:a9:e6:ff:96:65:2a:
f2:7b:42:7c:d0:bc:00:99:78:6b:4d:72:a6:af:04:18:21:c9:
d3:cc:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:23 2025 by rpki-client