Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: 2EBVNdWeGI/4GjgVkuxkFaAKCL7NRrITMAW/IRLkcZc=
Subject key identifier: 07:EC:99:81:86:AA:DA:FA:03:0F:7D:15:7B:74:9E:45:2E:DD:49:6C
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 01974D44FED08B3508F88001DA3AB6AC808E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0C9C
Signing time: Sun 08 Jun 2025 02:00:56 +0000
Manifest this update: Sun 08 Jun 2025 02:00:56 +0000
Manifest next update: Mon 09 Jun 2025 02:00:56 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: R9Oa7ErH65XIZAXu9/sIgUBVdAbdwyZ1JKw2riL7za4=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:fe:d0:8b:35:08:f8:80:01:da:3a:b6:ac:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jun 8 02:00:56 2025 GMT
Not After : Jun 9 02:00:56 2025 GMT
Subject: CN=07ec998186aadafa030f7d157b749e452edd496c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:12:5e:13:14:d2:27:69:11:3e:bd:2e:b3:
a6:c1:ba:66:a1:48:3f:a7:8f:a7:38:23:e4:52:d8:
8f:0f:83:36:a3:c3:83:bf:58:45:e5:a5:9c:12:70:
39:1f:ad:cb:be:b7:f5:a0:4c:e7:4a:ad:04:52:4e:
61:55:6e:ac:ea:11:c7:21:c8:1d:4d:21:46:af:a1:
e2:f3:40:ac:1a:06:e0:01:e6:2d:80:44:66:f0:a6:
f4:b7:db:fe:62:f3:bf:e4:81:3c:dc:d8:ad:4c:91:
5d:e8:7c:9c:24:4c:09:f3:81:ee:65:bf:bf:93:be:
ae:3a:3a:bd:59:8c:40:db:4e:3f:eb:1d:9e:93:1d:
65:93:23:9e:cc:99:94:1d:a2:c8:ff:c6:ae:c7:ed:
84:b3:91:22:c7:68:d0:81:0a:84:94:5a:2f:30:6a:
7b:02:25:63:5e:80:0a:f4:8c:41:f0:6c:ca:ca:ec:
d5:95:99:f2:b4:8d:22:14:97:d0:a1:a5:a4:3b:f3:
b0:a2:7a:00:cb:03:62:05:54:ac:bf:75:5b:03:a1:
04:0a:45:85:56:77:20:fe:d6:74:40:c2:5e:03:55:
59:71:14:39:20:78:9c:51:19:33:8d:93:6f:1d:88:
37:ee:48:46:47:c0:90:4b:93:ce:0c:c8:a2:61:1a:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:99:81:86:AA:DA:FA:03:0F:7D:15:7B:74:9E:45:2E:DD:49:6C
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:dd:af:38:3b:97:2b:23:e6:55:ba:d6:c1:6c:58:e0:25:
19:1f:c2:00:27:51:49:bf:af:d1:5c:1e:83:e0:ee:63:98:dd:
5d:4b:c6:ca:25:dc:e2:e0:6d:45:4d:4e:44:0c:2d:5a:00:fe:
98:02:cb:77:54:5a:2e:1e:bb:14:2f:a1:64:24:d3:a0:66:90:
66:2e:f1:81:23:92:f2:9b:80:c2:12:17:d3:ee:7e:df:1b:f1:
5e:0c:74:f2:d1:3f:1f:bd:4b:a0:6d:10:06:6d:80:7c:ae:4e:
a7:25:3d:88:ef:e3:70:8b:65:d8:87:86:99:60:e4:6d:08:63:
bb:24:91:d4:53:0c:36:88:fa:10:4c:c5:c2:43:cc:ce:27:99:
64:69:f9:48:b4:ab:bd:db:bb:19:d6:09:37:04:4a:e9:e4:8b:
15:14:87:e0:bd:25:1b:57:89:0b:a8:0c:70:97:92:de:aa:7a:
6b:3c:13:9f:9c:bc:13:87:e5:66:a7:57:f9:0b:db:ab:32:02:
22:5d:70:9f:0e:3c:53:8b:3e:b2:11:f8:36:07:a7:9e:f3:bc:
86:bf:5e:98:88:36:f1:6e:fd:81:51:e2:d1:57:46:06:62:94:
c8:df:75:a8:14:31:cd:c8:f0:0e:6a:f0:0e:80:90:cd:ab:e7:
73:8c:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:40 2025 by rpki-client