Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier: lRpjjtO99KQgIDbiPuXqUqWD6m9VUKM10VsdMSCwQn8=
Subject key identifier: F0:9C:4E:BA:59:42:CC:8D:61:91:E0:B4:22:1E:B7:58:7B:5A:8C:05
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial: 019756480CDC6F14CDBD0FD9ECA151779978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number: 1432
Signing time: Mon 09 Jun 2025 20:00:51 +0000
Manifest this update: Mon 09 Jun 2025 20:00:51 +0000
Manifest next update: Tue 10 Jun 2025 20:00:51 +0000
Files and hashes: 1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: IZJz+G9Vb+IPxdc1bAOBSjiyn+eTrl4R2x1seE8LzKQ=)
2: JaWvot76MTHHQ4kBFw9C82j2y4o.roa (hash: ixhJz3sDrdmmh9ldkvtB24V24cIIJCj92AgCDmIoozM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:48:0c:dc:6f:14:cd:bd:0f:d9:ec:a1:51:77:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Validity
Not Before: Jun 9 20:00:51 2025 GMT
Not After : Jun 10 20:00:51 2025 GMT
Subject: CN=f09c4eba5942cc8d6191e0b4221eb7587b5a8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:b7:b2:30:58:5f:28:b1:8f:46:dc:44:4c:
41:a6:48:cc:36:d8:30:cf:c6:2f:95:71:9c:bd:13:
dd:47:4c:5f:7f:e2:29:bb:f9:90:cf:ff:bb:22:07:
46:ff:1b:76:d0:37:34:3c:56:76:4f:71:18:49:0a:
84:87:04:b8:cd:6d:f1:50:78:1b:b5:2f:96:59:f2:
f5:e4:82:65:2f:e1:ba:5d:fd:9d:55:10:6f:e7:42:
79:dc:33:43:6d:f2:73:ba:b0:8e:7b:f3:9b:62:10:
2a:1a:11:07:7c:17:23:b4:6d:b6:80:75:9c:65:a3:
f8:c6:ea:cd:e3:2f:fb:6f:53:c8:89:7b:a6:3c:b8:
3f:4d:7a:6c:01:50:df:98:a8:45:3f:26:08:21:ba:
e1:a4:c0:99:54:f4:4a:2c:ac:23:2c:8b:1c:8b:bc:
3f:94:98:4f:31:5a:52:0f:9f:29:f5:f9:66:bb:d4:
51:77:fa:51:e2:3d:57:c0:2a:03:76:b8:1c:4a:1b:
d2:f2:7a:4a:1d:b7:bb:bb:7e:8b:26:54:ff:30:01:
0a:42:a3:83:34:f7:0a:db:61:c9:23:c0:86:79:9b:
d2:a1:63:4a:1d:d7:ac:bc:f7:9f:ab:19:aa:cb:6c:
9f:1b:b1:82:c5:57:27:e0:cb:d8:82:ac:a0:1f:4d:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:4E:BA:59:42:CC:8D:61:91:E0:B4:22:1E:B7:58:7B:5A:8C:05
X509v3 Authority Key Identifier:
keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c8:e6:b0:4d:7a:58:ac:22:37:a4:c9:59:79:d4:81:79:c4:
8f:f2:cd:ae:88:2a:fa:24:c1:86:fb:84:99:6e:40:fe:06:50:
71:f3:4e:7c:1a:ae:81:55:17:db:5b:e2:88:92:6a:de:5e:e8:
b9:30:5b:13:48:95:b2:f1:18:3a:c7:29:30:ca:7d:e4:66:e9:
38:b8:3b:e1:a1:e9:05:21:a8:70:09:fd:2a:51:9f:d5:d9:b7:
7a:b5:7f:83:0a:3d:58:ec:d7:b4:9d:44:a0:17:5c:67:1a:6a:
42:2d:b9:0b:cb:00:29:b5:7e:82:7c:35:35:ac:3c:a8:16:3b:
5d:e2:19:5b:13:6a:2f:6e:fa:a0:37:77:ea:d6:e5:47:ee:e2:
6e:ed:4f:ab:c9:a7:c0:d3:80:85:c0:60:84:d8:dd:aa:6f:3e:
63:dd:33:35:ac:9c:f4:22:63:4b:9a:21:05:30:58:0b:4f:35:
04:0a:5f:b4:fe:e5:62:df:20:08:ae:22:fc:30:b6:c7:ac:f0:
d4:12:3b:0b:42:60:15:ad:fc:da:68:38:35:79:3d:b6:6e:ec:
13:15:44:30:ae:e6:4c:27:7a:8e:5e:31:83:9f:49:88:e3:56:
cf:da:0e:f4:38:57:2e:9c:a4:ce:ac:b8:cf:82:f1:e6:af:25:
85:e5:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:20:25 2025 by rpki-client