Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: YrR3PRi1m8aqQd17aY1K2eKqyy/WHLCje8n0VfMW0KQ=
Subject key identifier: FF:1C:97:7D:21:06:A7:83:19:55:1D:19:B0:2F:9B:D0:FC:CC:E7:62
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 0197485573D87352B3BE1A3F5311B92F5DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0E88
Signing time: Sat 07 Jun 2025 03:00:49 +0000
Manifest this update: Sat 07 Jun 2025 03:00:49 +0000
Manifest next update: Sun 08 Jun 2025 03:00:49 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: pXn6URc5stHqC0M6T7HEHcOkeqq4fbNV4XUD57Ru5kc=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:73:d8:73:52:b3:be:1a:3f:53:11:b9:2f:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jun 7 03:00:49 2025 GMT
Not After : Jun 8 03:00:49 2025 GMT
Subject: CN=ff1c977d2106a78319551d19b02f9bd0fccce762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:f2:6b:8c:72:dc:a6:88:02:92:12:21:80:
5f:20:36:af:55:9a:30:30:33:2c:e0:ac:73:47:24:
5f:26:11:11:a2:21:25:9e:1c:f0:dd:fd:d6:0d:91:
9f:95:38:cf:c0:8d:e7:30:b3:bb:4f:01:cf:b2:4e:
49:a6:26:eb:4d:a7:a8:87:a6:8e:e2:35:2d:1e:d4:
a4:0a:fd:e6:ef:4c:c2:7d:2a:02:24:30:16:45:f7:
05:40:e7:00:12:ac:bc:4b:22:d5:fb:48:bf:dd:5c:
dd:1f:42:4c:41:a8:c6:5a:66:04:75:82:64:6b:27:
69:ae:d3:6f:67:3d:45:3f:f3:83:c8:ff:95:ae:f4:
7c:15:95:a5:bf:8b:e8:e9:d8:11:a6:a5:a3:ab:83:
f8:19:d7:2c:c3:61:f3:69:7e:f4:c2:11:a4:49:6d:
b7:f4:d6:0b:17:09:b5:17:fd:f4:25:86:e0:59:46:
b1:48:d5:89:94:30:18:d3:d2:a7:be:06:2e:af:10:
fe:83:e9:00:6a:0d:ce:d4:22:46:0f:00:a3:a1:e3:
0d:13:30:d6:e8:1e:a7:d9:73:3c:1c:4d:7e:cb:fa:
9a:43:f1:36:36:d0:53:c5:a6:22:c3:f8:dd:1a:8e:
56:16:5d:3e:bb:02:4c:5c:ba:d9:78:54:4e:15:8a:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:97:7D:21:06:A7:83:19:55:1D:19:B0:2F:9B:D0:FC:CC:E7:62
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a6:95:1a:6a:55:e2:3c:c4:82:77:fa:75:88:46:a1:e9:0e:
bc:c9:b1:fb:9b:70:2e:03:2b:a5:8f:26:bc:f4:31:50:c3:56:
f2:f1:3f:94:9a:5b:fb:20:7b:e3:0f:9f:0e:0a:f9:f2:9b:ad:
98:c8:3a:1a:a1:8d:3a:d6:88:70:39:4d:07:01:6b:c1:22:b5:
16:eb:0a:70:a2:5f:6f:1a:19:20:56:0c:ea:a3:7a:cd:f9:7a:
0b:51:c9:26:fa:41:29:b6:4a:83:21:70:18:0a:86:1c:29:be:
6c:96:c9:8b:9d:fb:7b:12:4d:07:87:c0:f6:46:fb:67:21:1a:
4e:da:42:32:78:a7:8d:6d:00:a5:e4:31:3d:18:b5:d7:bc:d2:
a7:d2:72:89:76:dd:0c:cf:5e:f4:41:42:c9:dc:05:bf:ff:a2:
25:71:4f:2c:2e:14:0d:27:d4:6e:58:ea:07:1d:f1:d9:e5:0d:
c5:12:0b:54:c5:2c:c5:80:59:ef:7f:c5:42:91:74:ae:c9:23:
54:2f:77:ae:40:90:17:b5:c1:f6:68:c6:82:78:f8:0e:92:c7:
ef:d9:97:ab:47:e3:d9:be:34:81:c1:15:13:98:33:a4:4f:11:
d7:e2:d7:5c:70:95:8d:40:18:65:d3:de:be:42:8a:51:6d:71:
fd:c3:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:07 2025 by rpki-client