Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: qO++IQ3nXfX/XSHB9UZW2M3USO+blAszRkeC2iM/AZc=
Subject key identifier: 06:BC:19:0D:62:9F:C1:D6:CC:BB:BF:53:94:23:89:CE:E7:37:AD:86
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 01974A0C6E2D0A656F64D8ACCA4770ADB089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 11:00:17 +0000
Manifest this update: Sat 07 Jun 2025 11:00:17 +0000
Manifest next update: Sun 08 Jun 2025 11:00:17 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: Xn+rP9DoggMxZWxwuueRAMdMOQP/lC1UsLw91eigWDE=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:6e:2d:0a:65:6f:64:d8:ac:ca:47:70:ad:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jun 7 11:00:17 2025 GMT
Not After : Jun 8 11:00:17 2025 GMT
Subject: CN=06bc190d629fc1d6ccbbbf53942389cee737ad86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:5e:0c:8d:84:bf:ab:94:72:47:ca:03:50:
84:6b:1a:65:75:2e:48:cd:7e:06:ca:07:09:55:e7:
76:45:29:3f:e2:be:bd:68:0f:20:d9:14:67:8b:51:
ab:f1:c4:1a:4d:d1:1a:42:e0:ce:50:8e:88:15:c4:
e7:d7:b1:7b:7e:5b:14:2a:ee:fd:a4:0c:e1:33:e5:
0c:f5:62:94:68:66:0d:61:e1:1d:ca:e5:8d:e5:9b:
c3:b7:31:77:e5:44:0c:20:90:e7:0e:99:5c:14:b8:
b4:2a:66:f9:98:0d:a9:14:49:79:bd:fd:2a:e3:b6:
02:07:0a:43:f2:19:af:f6:7f:94:99:a1:0b:55:69:
de:17:d2:7f:7d:48:ce:0b:c6:3e:a8:3e:a9:f8:a5:
f4:21:d4:5e:62:3a:ba:ca:58:10:7e:33:cb:df:1c:
b1:9f:7d:a4:e0:54:61:cf:46:84:9c:84:a9:84:a8:
1d:25:6c:3f:b0:06:59:de:90:c9:8e:6e:d9:5d:eb:
be:25:ed:5b:a7:6d:f3:31:d7:02:5f:da:b2:3d:d2:
9e:8b:7c:e9:13:84:ed:71:da:19:c3:21:fd:96:09:
56:61:65:dd:50:43:6b:cd:0a:5f:fa:8a:bb:50:57:
79:63:e1:f2:d4:4b:61:81:bd:07:42:c2:9c:75:c8:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:19:0D:62:9F:C1:D6:CC:BB:BF:53:94:23:89:CE:E7:37:AD:86
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:48:3d:a2:15:34:1c:84:ea:5f:b8:09:4f:9d:6c:6d:81:
3c:88:c2:e0:d2:54:3e:74:ca:a0:7d:6a:1d:5c:3f:a1:00:d0:
1a:cb:7a:9d:1f:b0:2b:14:bd:28:9d:4a:03:5c:ec:23:0c:71:
f6:fe:d2:5e:f8:84:ad:79:81:45:55:b7:64:c9:0d:30:10:63:
0e:5e:0b:41:23:92:5c:39:d9:5c:e1:a0:87:df:5b:06:48:30:
11:ba:a2:e0:80:36:d2:fb:6f:8f:a8:1f:65:bb:22:81:63:90:
45:82:e8:af:bb:37:e4:84:7d:d3:05:4b:1b:c2:13:fa:be:3d:
7f:ee:7e:ac:92:e1:5b:c6:57:85:b9:9e:cd:a6:e2:78:c6:98:
b4:e1:87:81:f1:ca:46:33:58:b6:ca:40:4f:c3:45:d7:82:72:
74:81:80:18:08:95:ed:bf:5a:ce:f4:82:f1:82:11:35:fc:e5:
07:04:30:33:9b:da:b7:4f:9a:db:02:69:b9:3a:71:7e:8b:1b:
b1:41:82:ef:8e:40:50:dc:dc:c3:df:fa:84:66:1b:76:88:cc:
7c:e9:8f:9d:8a:d6:5a:02:2b:c0:a4:13:98:04:83:06:21:35:
ab:a2:d8:b6:1c:9b:20:d7:17:cd:8a:d4:d7:03:34:04:30:44:
b3:f5:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:38:29 2025 by rpki-client