Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: Dl1j1iRDgYIY/4JrdxSddQASwyBQRs83A8HpSkzOP3I=
Subject key identifier: 13:54:99:D8:18:D8:23:6C:F2:40:C8:FB:B8:63:E8:8C:2C:0A:6A:DE
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 01975045FA928411B29F9E55FBA3E67C2CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0F7B
Signing time: Sun 08 Jun 2025 16:00:52 +0000
Manifest this update: Sun 08 Jun 2025 16:00:52 +0000
Manifest next update: Mon 09 Jun 2025 16:00:52 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: OD3HYQDS1gu1keWl1Z98uU7gqFvt9buGGjJ8DKMiVe8=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:fa:92:84:11:b2:9f:9e:55:fb:a3:e6:7c:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Jun 8 16:00:52 2025 GMT
Not After : Jun 9 16:00:52 2025 GMT
Subject: CN=135499d818d8236cf240c8fbb863e88c2c0a6ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:ab:3d:a5:53:55:80:d1:ec:bc:64:7c:99:
65:38:77:74:a6:c6:cc:f6:e5:58:e7:20:62:67:a7:
23:ab:70:04:2b:ab:2f:b7:77:f4:2d:b6:14:0b:5e:
d3:1d:33:1c:a3:e7:b0:56:fc:3c:1c:73:66:60:ac:
9d:7a:c1:17:9b:25:67:ac:d2:1a:19:ec:31:be:17:
c5:0c:a9:cd:9c:c0:37:cd:ed:5f:09:61:8c:c3:50:
44:e6:59:4f:57:2d:e1:f0:36:9c:68:1b:88:f3:b8:
ad:15:e9:98:d8:08:a1:77:9e:ca:d9:5c:f5:b6:da:
14:43:f1:0f:08:7d:ef:41:5e:8c:0c:ec:4f:1d:15:
81:16:3d:03:47:1e:9a:02:7a:eb:39:de:9a:ce:c8:
3f:d4:c8:52:e6:fd:47:7e:36:43:19:04:c4:8f:93:
5c:f2:57:71:c7:3e:1d:f5:d4:3e:73:03:92:f8:42:
79:2d:0c:8e:51:a9:cc:35:f6:41:94:91:76:ac:73:
0f:78:b3:d0:e3:3d:47:bc:c6:21:86:dc:f2:34:d7:
c5:61:8a:96:d9:05:af:e1:f3:69:6c:76:37:a7:0a:
9e:2a:d7:26:65:a8:d8:75:b6:ba:d7:ce:19:cb:3d:
48:0f:7e:3d:16:81:37:74:a8:3b:e8:4f:1a:6d:3a:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:99:D8:18:D8:23:6C:F2:40:C8:FB:B8:63:E8:8C:2C:0A:6A:DE
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fd:e3:93:23:73:b6:94:8c:fe:75:13:59:be:94:9c:42:6f:
35:6b:10:71:f3:ff:cd:c2:b0:8a:12:ab:93:47:a7:7a:37:f6:
c8:90:3f:f8:e4:f1:1a:b5:6e:d6:fe:42:22:fd:53:02:34:ab:
16:b9:25:39:da:f2:f1:b5:30:ec:09:e7:f7:98:e7:35:f0:df:
51:81:dc:ca:ee:cc:ab:36:eb:c9:08:a8:56:36:ee:98:66:85:
fa:f6:d3:d5:d0:8c:ec:26:96:0f:26:cc:c1:e8:d7:88:4a:37:
c1:c4:93:29:38:69:ef:bf:29:59:54:44:8a:02:37:91:75:08:
1e:ca:a7:26:c6:96:97:5f:74:f8:d1:7c:2c:75:40:10:27:93:
e9:ba:ef:1c:c4:aa:ae:9f:8e:15:6a:26:5a:c9:24:78:e1:41:
61:9e:21:84:f1:3a:32:02:0b:ca:b0:60:17:90:11:a2:e5:36:
50:f4:5e:f8:09:51:2a:eb:63:11:6f:31:fe:1b:a5:b0:45:f5:
55:03:ea:68:ef:66:7d:a8:66:5c:0c:b4:93:17:f5:83:e7:13:
50:d5:fd:bb:00:6f:4f:31:13:f6:d6:d1:47:d1:29:e9:e6:c7:
31:67:76:59:a9:ad:aa:87:f1:59:f5:88:4e:8c:1b:de:51:24:
06:ab:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:20:26 2025 by rpki-client