Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: v2Ae9A7/Uahbcq877OCe3VAfsIXzN0OZ9tkhZTy48iE=
Subject key identifier: 72:B9:B8:E2:B3:79:7F:6C:25:AD:16:6F:AF:EC:CB:83:F3:A8:E1:A5
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0197729A9DE868E1AD8CF81E8BE7C5281A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0630
Signing time: Sun 15 Jun 2025 08:00:25 +0000
Manifest this update: Sun 15 Jun 2025 08:00:25 +0000
Manifest next update: Mon 16 Jun 2025 08:00:25 +0000
Files and hashes: 1: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (hash: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=)
2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: Mtzc42rQvF0sRfxkm7AvdQwSYvWE09wApMOqch7R1Yw=)
3: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9a:9d:e8:68:e1:ad:8c:f8:1e:8b:e7:c5:28:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jun 15 08:00:25 2025 GMT
Not After : Jun 16 08:00:25 2025 GMT
Subject: CN=72b9b8e2b3797f6c25ad166fafeccb83f3a8e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:a7:45:af:95:48:a7:4e:33:5b:62:50:67:
34:38:42:e5:a1:43:89:aa:20:8b:84:38:21:56:37:
2e:fa:4a:93:12:53:a9:d1:16:ed:ba:39:db:96:d4:
5d:f4:00:0d:af:0a:8e:72:ce:be:52:99:cb:af:ed:
44:62:65:4b:bf:2c:7f:98:78:8a:d9:61:48:81:f9:
37:c1:2d:11:3a:d5:6a:31:7f:ce:7d:28:d7:11:95:
a6:85:f1:7d:44:9a:27:85:b6:81:24:1c:44:0a:d2:
60:e4:8e:1c:2c:5f:32:07:84:78:f5:9a:ac:b4:68:
cb:6a:2c:a7:a6:ab:e6:0c:86:c3:6a:ec:7c:17:f3:
36:54:24:d2:b3:a3:cc:53:f5:5a:19:59:25:c1:f1:
0c:63:fa:4c:33:18:c3:47:48:d2:92:8b:3e:7b:4b:
e4:2e:b2:b7:a4:0e:3d:a9:51:b5:e8:1b:ad:3c:31:
6f:c9:10:de:b3:4f:84:42:0a:18:22:5f:57:87:04:
ab:47:d0:42:3c:ed:42:1d:49:cc:c7:02:65:24:60:
6e:59:e1:0e:28:93:88:b5:5d:30:95:5f:5d:9e:be:
45:86:4a:25:d4:63:fb:57:8f:a4:2d:b3:dd:98:9a:
fe:8d:0f:aa:e6:00:0a:22:23:cf:68:ad:21:f0:47:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:B8:E2:B3:79:7F:6C:25:AD:16:6F:AF:EC:CB:83:F3:A8:E1:A5
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:29:97:62:1c:47:45:16:c9:58:42:13:eb:8f:39:0d:b5:f5:
54:65:45:b6:f3:32:eb:95:a1:0b:0e:7e:03:6e:cb:30:ff:bc:
d2:b0:c4:46:8e:d1:fe:38:94:77:c0:7e:08:f8:f8:be:6f:f0:
94:93:9e:6e:4e:26:05:0f:06:6a:48:96:18:7d:28:1d:a1:fb:
ad:a1:7c:ec:f0:9c:86:85:65:dc:c9:4c:b9:da:0b:da:bc:d0:
c5:87:e9:ab:cb:c3:52:db:af:25:43:5b:fe:03:3b:59:d4:c5:
7b:74:96:73:1f:00:c8:dd:8e:a4:36:33:82:f0:03:4d:a4:c2:
3e:ec:94:2c:a9:f1:8a:39:a8:8e:8e:60:a7:5a:31:65:f8:dd:
d5:b5:4a:91:cb:80:3b:bc:45:e9:61:53:ad:c6:02:d5:30:1c:
d6:6c:95:8b:fa:1b:1a:ec:79:a1:0f:d7:10:28:10:b6:d8:d1:
b7:68:58:54:c4:f2:dc:67:6e:9c:97:8c:df:18:5a:ef:e8:3c:
2d:f0:96:bf:3d:98:21:14:c1:84:48:11:ac:8d:50:95:57:db:
66:48:59:7f:23:43:b9:2d:7d:24:08:16:f5:37:12:ce:fd:8c:
27:03:68:ec:90:15:6e:65:28:b7:de:eb:ec:5a:ce:14:a2:cb:
ea:d3:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:33 2025 by rpki-client