Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: eBzMNR61Rq1BJJBDLsUI2E5IzuW56eHe/xQVXZcBVgA=
Subject key identifier: 10:04:8E:A5:5E:9C:6F:77:59:7B:39:49:29:6B:74:3D:77:C5:AB:F1
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019745F8D0FBB099813AEC9CD73F024DBDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 16:00:23 +0000
Manifest this update: Fri 06 Jun 2025 16:00:23 +0000
Manifest next update: Sat 07 Jun 2025 16:00:23 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: Km5tA5ub2uwaX5k4sNtb/1jtKvPl5K0dDGLiIhZYMf8=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:d0:fb:b0:99:81:3a:ec:9c:d7:3f:02:4d:bd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jun 6 16:00:23 2025 GMT
Not After : Jun 7 16:00:23 2025 GMT
Subject: CN=10048ea55e9c6f77597b3949296b743d77c5abf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:ca:63:42:d2:21:72:6e:d2:f9:23:42:a9:
59:12:53:4c:39:ed:52:f4:02:82:cb:a0:ed:a9:04:
5b:c8:e7:ef:3e:f6:90:fd:da:96:b6:16:ea:ca:3a:
99:46:68:da:6b:3e:7b:44:ee:e1:9a:46:d1:e8:4c:
99:51:fd:50:11:48:dc:e4:8b:25:9a:47:27:c9:68:
3e:7e:6f:01:eb:24:43:57:ea:26:35:81:6b:4f:bc:
ed:e0:28:67:df:95:47:79:42:07:c2:86:88:f5:0b:
93:ae:d6:ee:be:ac:2c:8b:d3:40:1e:93:84:b9:19:
52:da:d5:bf:ec:09:ee:ec:3d:24:c9:a5:80:52:51:
30:08:d9:43:a8:6a:9c:2c:53:c4:2b:36:be:fb:53:
29:be:70:4e:82:e0:90:be:4a:77:ca:4b:a5:75:be:
d2:bc:75:8c:72:93:df:d0:af:4a:5c:cc:f7:c8:17:
95:12:81:d6:f0:bd:41:2b:8a:0b:62:53:9c:41:59:
d0:dc:00:cb:98:bb:66:fd:29:17:b2:76:fe:e3:70:
e1:90:2e:2a:ec:04:06:01:25:d5:2f:0e:7c:a1:2d:
12:6e:76:f8:d2:af:f1:27:b2:d1:2b:d4:20:ce:94:
14:aa:a2:3c:9e:c5:e9:50:b2:55:55:93:07:ec:e2:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:8E:A5:5E:9C:6F:77:59:7B:39:49:29:6B:74:3D:77:C5:AB:F1
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:57:db:f7:2c:ed:c7:f1:5a:78:6b:db:45:c9:8c:f3:30:59:
b5:b2:1b:95:44:b8:da:a3:f9:86:7f:07:b4:c3:b3:4a:7a:e4:
f0:36:39:ed:80:ab:67:fd:d8:53:18:3d:61:1e:4d:45:5a:3c:
f8:42:bf:e4:20:5f:eb:5f:b7:34:b6:f8:f0:9d:ba:aa:1b:57:
3d:39:d3:8f:3f:61:9a:08:6d:f8:40:b8:6c:48:0b:ee:ab:59:
19:17:f1:ff:61:99:c0:0a:30:e0:88:07:10:7c:de:14:b8:5c:
c3:25:23:ef:d6:53:96:53:e7:ae:de:ab:96:ca:e6:b6:bd:8c:
dd:e8:2c:a3:af:df:55:b7:5c:90:30:4f:77:ca:92:d8:c1:ec:
51:ce:63:80:94:82:85:08:4f:80:47:1b:fc:c7:df:db:78:8a:
33:ce:45:7c:15:37:27:1b:8d:50:14:c8:a1:e8:0a:55:db:23:
03:94:56:d7:21:3c:d5:b0:a7:bc:56:97:b7:b9:5e:92:04:69:
1d:f8:0d:fe:ee:50:d6:7d:c8:47:6b:fd:ae:25:c0:3a:7f:3a:
a0:05:30:6f:b8:be:35:6f:c6:bb:b6:a1:53:66:10:de:10:c6:
b5:1e:1c:b5:49:20:fd:22:17:05:0e:08:17:d5:72:db:ba:a8:
0c:c2:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:46 2025 by rpki-client