Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: XHgsB0phhwBeJDBqYlNT9MWoK5Fl8EPg9mKo/m0PeAQ=
Subject key identifier: 3E:25:EB:F1:7F:F1:17:8F:0A:7A:29:E0:F7:24:E3:C6:A6:1D:AB:D6
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01976515D6CB97C515731295855341233220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0629
Signing time: Thu 12 Jun 2025 17:00:19 +0000
Manifest this update: Thu 12 Jun 2025 17:00:19 +0000
Manifest next update: Fri 13 Jun 2025 17:00:19 +0000
Files and hashes: 1: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (hash: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=)
2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: j43e5bzh2oxqsPm96zMAGcnruWXGwCMAwM0PzAx+6uI=)
3: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:15:d6:cb:97:c5:15:73:12:95:85:53:41:23:32:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jun 12 17:00:19 2025 GMT
Not After : Jun 13 17:00:19 2025 GMT
Subject: CN=3e25ebf17ff1178f0a7a29e0f724e3c6a61dabd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:ba:a7:69:43:13:89:4a:d2:e4:2f:d6:86:
20:04:ec:a3:cb:80:bb:53:87:cd:98:ec:55:93:a7:
ca:92:8b:fd:de:b0:a9:1e:e8:d1:b3:50:9f:73:79:
6d:0e:2b:63:e1:13:9c:4d:95:57:ea:82:f2:ab:43:
40:f3:85:7b:f7:d7:19:6e:3f:73:2e:ce:4b:a7:77:
b3:5c:1e:bf:f8:60:eb:37:d2:94:52:d6:ae:05:3c:
bb:70:56:98:43:fa:9c:ff:b6:f1:dc:26:b9:63:1c:
6a:1f:e5:8f:29:ed:1c:ba:2f:e8:e7:ec:b2:8c:03:
d3:85:48:c0:7a:af:3e:a3:00:19:3d:7d:78:2b:b3:
78:9d:65:14:35:33:03:26:f7:69:da:c3:87:6c:92:
db:e9:da:18:93:13:2f:80:a7:cf:c8:15:96:b2:cb:
dc:cd:b6:85:a3:0c:a2:a8:dc:18:e7:77:1b:33:7e:
d0:1b:e1:83:a4:80:c1:43:54:ab:34:40:34:c7:66:
84:4d:d8:6f:c8:aa:cf:9d:c3:03:02:a5:68:eb:59:
47:f9:a6:c4:f0:b0:c1:a9:f9:b5:eb:06:50:3a:0a:
1d:c9:ff:e9:22:0f:7c:41:67:7c:3e:cd:39:c4:c4:
b5:40:81:47:36:1a:11:25:5c:7c:fd:c2:6b:6d:3b:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:25:EB:F1:7F:F1:17:8F:0A:7A:29:E0:F7:24:E3:C6:A6:1D:AB:D6
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:56:a6:b4:da:51:f5:4a:56:15:12:b8:36:ba:5b:51:ba:83:
c7:c1:66:c9:b3:c3:12:04:fe:ad:c9:8e:8e:df:55:e7:74:54:
d4:53:36:72:23:18:66:d6:b5:a9:f6:f4:29:f8:5b:de:66:5c:
ce:cb:9c:1f:1e:41:36:4f:ff:e0:dc:1d:2a:96:64:b4:b7:63:
b0:e2:ea:61:cb:d1:55:9b:8b:6b:1e:ed:0e:91:bf:b5:e9:0e:
ad:8b:dd:f9:a1:bf:b5:1b:39:77:2d:eb:44:a8:b7:38:93:70:
da:b6:7e:4f:67:06:72:b8:c2:01:1f:e2:38:79:ad:dc:81:fd:
5b:24:14:3d:cf:ca:41:93:d5:52:46:7a:36:ed:e8:2e:ee:71:
c5:41:c3:31:78:29:e5:d2:2e:37:9d:4d:33:33:81:bf:e8:1b:
d0:ee:2c:d9:c5:db:de:77:f2:bc:dc:fb:25:7c:dd:44:11:ce:
d0:51:72:2f:dd:e8:5c:12:49:85:de:ee:84:a8:45:98:be:59:
8e:e1:02:82:05:84:f6:a4:d3:fb:0d:36:68:88:08:d7:2c:bd:
73:2c:f4:b7:2c:0f:47:e3:5e:c6:d9:0a:b4:0b:f6:15:77:21:
dd:75:db:00:6d:d5:ac:e9:d6:f8:cf:cf:89:0a:dd:37:82:e9:
c8:f5:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:36:25 2025 by rpki-client