Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: YOVb4PajcLNvxzg6bnldeDJRPWPkxfMtZW8axsaE4ls=
Subject key identifier: 99:89:39:F5:5B:53:9F:D4:31:67:F3:0C:64:7C:44:E5:58:CF:32:37
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019765BAD203DB5C3AC475D0FBCD7D135161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 20:00:31 +0000
Manifest this update: Thu 12 Jun 2025 20:00:31 +0000
Manifest next update: Fri 13 Jun 2025 20:00:31 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: wL2RTG6FOdyAAjCsVtozoS4/GMjPKo/TN64HZHVulHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:ba:d2:03:db:5c:3a:c4:75:d0:fb:cd:7d:13:51:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jun 12 20:00:31 2025 GMT
Not After : Jun 13 20:00:31 2025 GMT
Subject: CN=998939f55b539fd43167f30c647c44e558cf3237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:88:26:fe:77:c5:70:e5:66:73:cd:b3:d3:
98:65:9a:a2:f2:99:ce:bd:2a:64:82:ec:9a:08:32:
32:84:6f:e1:9e:07:07:ca:f4:f9:44:e3:0e:93:05:
1e:fe:91:20:2f:70:63:0a:5f:d0:c6:95:aa:c8:14:
6f:83:ec:a9:96:8b:22:2e:8d:ff:0c:7f:d4:b8:96:
f7:08:b7:48:a2:c5:be:38:6e:cd:18:55:27:dc:52:
31:3f:1b:b9:a2:28:af:fd:eb:ce:84:86:92:0f:37:
3b:0d:f7:ba:e3:3a:a8:71:8b:b6:d4:80:34:50:29:
4e:c8:20:2a:52:ff:7d:bf:e4:49:83:4c:29:01:cd:
8d:a9:60:6d:e1:db:7d:51:c4:52:d4:6b:42:32:2d:
56:ef:8b:65:2f:e5:01:56:0d:34:1d:1e:f4:7b:87:
d5:0a:9c:a9:81:3d:e5:29:81:3c:a8:11:31:2d:ec:
55:be:2c:ae:b4:d9:4a:b6:ce:b1:66:dd:63:8e:36:
e4:0f:b6:f3:50:94:56:03:c2:08:36:48:ce:88:91:
84:90:12:cf:f4:c8:e4:07:69:f2:23:20:2b:94:70:
95:d0:98:ad:f8:06:50:55:83:f8:82:48:95:1e:e4:
97:b9:0c:75:bd:cf:96:69:d3:4c:16:dc:cb:84:db:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:39:F5:5B:53:9F:D4:31:67:F3:0C:64:7C:44:E5:58:CF:32:37
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:79:83:59:aa:3d:34:e8:73:88:f9:f6:05:57:a4:ff:97:0b:
b0:03:fb:12:3c:cb:7e:fe:2d:1f:25:e6:c7:60:38:5f:3e:4a:
90:af:94:ef:75:41:cc:6a:f1:0a:88:0c:9c:1c:62:23:da:5a:
a7:d5:5e:11:ba:ed:f2:11:ee:82:41:45:9c:cd:7a:99:9a:4d:
06:31:68:b8:56:aa:0e:bc:f0:73:2e:32:7b:bd:0b:85:56:35:
9b:78:2b:2e:ca:9f:9f:63:cf:50:07:f2:74:7a:50:49:16:8a:
cf:98:c3:3a:8e:0c:bd:f3:8c:dd:f6:c5:7f:ba:7e:47:bf:e4:
aa:e0:0b:ab:73:fe:1a:bb:20:e8:49:c6:f3:24:d6:7f:35:90:
c7:a0:c5:47:7d:24:0b:82:1b:f3:75:d5:b7:2a:2c:bb:d1:2d:
29:45:02:28:e5:8c:69:13:d3:fd:b1:bc:d4:c2:4e:f7:93:f1:
6e:e6:8b:43:11:74:a3:c7:ea:26:76:a9:57:e9:22:61:e4:ed:
e6:46:06:66:a2:5d:b3:60:e7:20:36:4d:ca:08:63:1e:68:b4:
ac:b8:ba:8a:aa:db:36:ae:57:dc:ff:b1:c6:f3:ae:21:18:23:
ab:7b:de:ed:7d:d9:a8:fd:f5:7e:ad:5f:64:5d:3e:93:de:3c:
fe:b1:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:24:09 2025 by rpki-client