Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: QM/KTkKxvyneUOeI20s7/UymGyS2lRzJfKp1WSCW1gU=
Subject key identifier: 17:3C:8A:31:5D:52:64:62:5E:F6:8B:65:C7:26:B5:5D:A9:26:97:03
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 019748C2E78AC8D087F235BA70371A3115F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 09D4
Signing time: Sat 07 Jun 2025 05:00:21 +0000
Manifest this update: Sat 07 Jun 2025 05:00:21 +0000
Manifest next update: Sun 08 Jun 2025 05:00:21 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: zfWAWub1pdh5HJTJtYsYhjztu9G0NSvTYoY15527eSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:e7:8a:c8:d0:87:f2:35:ba:70:37:1a:31:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: Jun 7 05:00:21 2025 GMT
Not After : Jun 8 05:00:21 2025 GMT
Subject: CN=173c8a315d5264625ef68b65c726b55da9269703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:25:5e:8d:7a:9d:81:28:47:37:d7:da:2a:91:
37:f6:8b:ba:a0:ec:c3:60:cb:4c:75:5b:7b:86:17:
45:f1:c5:52:d7:4f:45:31:42:6a:01:72:20:c1:4f:
db:45:a2:50:d7:06:76:8f:7f:fe:23:dd:b6:49:40:
d4:64:ab:d6:99:36:e6:b1:6f:39:76:bf:fe:98:9d:
fa:2a:a3:28:03:ea:b0:bf:a0:36:4f:7b:22:41:b7:
f7:71:50:e7:89:47:59:65:5e:e5:96:e5:49:19:2a:
5b:9d:38:e8:8e:ad:f6:93:f8:66:53:da:bb:ec:05:
cc:7b:81:ba:10:0b:7c:d9:fd:a8:f6:2a:22:6c:15:
d8:c4:00:44:41:14:ab:23:cc:bc:ff:e7:69:6b:d8:
4b:ce:3e:68:67:05:fa:9a:83:1d:bb:be:aa:f5:2e:
2e:28:be:ab:3e:9e:9a:a3:1d:7c:f0:1d:cb:ff:4c:
ba:b4:19:10:1f:f3:ca:73:87:b7:de:6b:b7:c1:16:
71:ca:af:52:a3:d0:b7:36:77:4e:eb:b6:15:6e:d9:
56:03:27:c4:eb:fd:8e:85:fe:b4:e0:ee:1d:9e:39:
8b:df:e8:06:10:9d:82:79:26:63:b9:c3:61:2a:5d:
e5:7e:ba:34:65:98:67:e1:0a:29:6a:af:68:a2:63:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:8A:31:5D:52:64:62:5E:F6:8B:65:C7:26:B5:5D:A9:26:97:03
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:88:68:fe:64:45:07:c2:85:d8:b4:ee:a0:1f:5a:5f:c3:45:
9c:34:04:30:7f:a0:38:3c:e1:62:d3:5f:bd:af:23:f9:9a:e5:
41:df:9d:8c:5b:fa:ae:e2:d9:73:44:5f:40:3f:33:0c:8e:68:
e5:19:fc:d5:26:4e:99:82:7f:11:f8:73:45:02:41:77:5b:7d:
b0:33:62:99:83:3e:53:ab:90:43:02:ea:43:e6:b7:85:98:2e:
56:39:77:42:b3:75:b8:ed:1b:1c:6a:89:05:4f:b7:b6:cd:bc:
0f:75:27:05:d9:1a:68:b1:14:d7:bc:54:08:23:cb:d6:ef:f4:
bf:70:db:9e:b8:99:7d:e2:0c:d9:98:e9:ac:5c:ba:a0:fa:90:
19:81:1b:21:00:66:82:10:75:e1:bc:ac:2c:ca:51:49:71:de:
36:4d:41:f2:22:e0:6a:80:41:12:47:bc:da:4c:f9:34:bd:99:
fa:56:43:19:55:01:93:f7:ce:3f:68:50:35:b1:d4:a2:58:f0:
90:eb:d9:12:c2:17:d4:16:89:4b:c9:2b:96:75:6b:89:02:5e:
59:66:23:47:1a:30:c0:af:bc:9b:c2:31:0c:36:73:e6:56:1d:
ff:a2:24:b8:4b:c5:ba:57:68:83:3a:ef:e4:f4:69:4d:71:18:
7d:b2:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:08 2025 by rpki-client