Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: k9b8DA9I69PK9Q0FMngEWXELop+cYv0F6FtBFoS+f0Y=
Subject key identifier: 08:D2:18:AB:CD:14:BF:C3:13:8D:14:E3:D3:B0:D2:E5:B9:7A:0D:B1
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 01974D7C54BE1997BDB660A178622DF989A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 03:01:23 +0000
Manifest this update: Sun 08 Jun 2025 03:01:23 +0000
Manifest next update: Mon 09 Jun 2025 03:01:23 +0000
Files and hashes: 1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: lLyQRZfpcUAhZcZpiBHLZgvmJyGxIGjLPc4woPSoSss=)
4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:54:be:19:97:bd:b6:60:a1:78:62:2d:f9:89:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Jun 8 03:01:23 2025 GMT
Not After : Jun 9 03:01:23 2025 GMT
Subject: CN=08d218abcd14bfc3138d14e3d3b0d2e5b97a0db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:9d:3b:ac:cd:67:b8:84:0f:08:0b:24:df:
16:67:5e:fb:18:69:56:44:d3:56:ec:e4:61:6e:9f:
e8:8f:bb:4b:09:10:c1:3b:da:ed:19:b4:7c:98:66:
a0:b9:a0:5d:90:6c:b0:7a:70:44:11:bf:8b:99:72:
a0:d7:c7:df:09:10:bd:66:62:71:a3:52:73:fb:42:
d5:9f:a3:17:05:30:cd:26:99:04:66:6b:9b:e8:a9:
fc:ba:75:fa:3b:ef:0e:bf:f8:ff:12:8a:d0:ea:5d:
05:1c:8f:04:d6:53:4b:5b:27:4b:a4:55:1e:8e:15:
f1:ed:76:1a:56:c9:6b:16:8d:c7:22:0d:1b:f5:8a:
d2:aa:2b:e9:8c:0f:9a:0f:2e:04:5c:83:aa:63:33:
3e:a1:d0:ca:a4:64:e7:5d:06:1b:6a:48:4b:d2:2c:
d6:b4:75:13:16:fc:2b:27:8a:b3:fb:0a:ee:ac:47:
2d:15:eb:40:10:c0:d8:90:99:20:06:90:2a:6f:3f:
d7:46:02:dc:0d:26:7e:5d:f2:a8:1a:0e:61:9c:78:
6a:2a:9c:df:d7:2d:67:4c:8f:68:60:09:b8:d8:b1:
99:c4:f1:d3:0b:da:c9:fe:5f:66:65:e3:b3:19:bf:
ef:4f:26:5f:62:66:0d:f3:8c:d1:56:4e:b0:35:e2:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:18:AB:CD:14:BF:C3:13:8D:14:E3:D3:B0:D2:E5:B9:7A:0D:B1
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:d7:0d:b1:8a:b5:d7:01:0a:82:93:87:af:13:06:20:2e:
d0:50:4e:e1:e9:5b:ae:57:b3:e4:5b:c4:14:32:6c:95:4c:9e:
6c:3f:f2:a4:25:87:4d:59:c8:b3:07:21:a4:b5:06:f6:5b:cf:
54:db:0c:80:c4:2e:cc:86:67:6b:ff:d0:eb:03:99:cf:db:3b:
27:14:ff:59:8d:d5:6d:dd:ae:9a:8d:79:0a:65:8f:1d:9e:f7:
e6:bc:18:76:3b:be:8d:79:ef:1f:c9:75:b6:a5:9c:f7:16:c7:
6a:42:4b:ff:af:aa:8a:b6:bc:f1:00:76:61:8b:e8:e1:ae:da:
79:08:15:df:4d:2a:d8:8c:08:8a:b8:5f:bc:01:8b:12:51:9e:
d6:c9:f0:70:2b:e8:d4:51:79:db:f8:ec:5c:1e:7f:20:09:b3:
a1:38:ee:ce:76:0e:2f:22:41:0b:bc:4d:e2:c9:ae:3f:b0:37:
87:66:0b:2c:f7:0b:74:b2:51:5c:25:bd:f1:c3:42:01:3b:3a:
a2:84:bb:d6:4f:0e:9b:3e:ab:46:98:a0:3a:f1:3a:3e:d7:ad:
8b:71:af:d6:2d:e9:61:3d:e3:ca:17:d4:01:d4:4d:7f:eb:29:
54:44:ab:80:b6:54:46:ed:04:03:85:1f:ac:04:8a:76:78:fa:
74:f6:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:15:36 2025 by rpki-client