Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: w0KA6sLFjSHecoQb/P1zZZBh/WScyrQGzV1dqhcE27I=
Subject key identifier: 17:9E:07:FA:38:7B:C0:F9:E4:1F:D1:C7:E2:29:E7:68:23:60:5B:06
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 0197499EF8D37E358BC749E880975169226E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 1511
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: VNm7NSOhNSCWV6V3IjxMSDzrVVr3Sz0YJ8u3i71ne+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f8:d3:7e:35:8b:c7:49:e8:80:97:51:69:22:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=179e07fa387bc0f9e41fd1c7e229e76823605b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:bc:5d:4a:63:5a:3d:78:42:b8:cd:2b:0e:
59:24:86:98:59:fe:c4:7c:98:d6:2a:61:41:ef:d4:
97:ff:e7:3e:cf:46:4c:2f:5a:e2:7a:ca:82:7a:ea:
8b:bf:cd:de:41:92:8a:8f:d4:46:a4:0e:d0:31:21:
0f:73:52:4b:b6:f8:ad:dd:20:f1:30:99:48:d0:5c:
d5:00:a6:ae:2d:87:18:08:ec:fe:6a:35:81:fc:0a:
c3:46:06:76:5c:be:3f:c2:97:d7:33:46:ff:1b:c8:
19:ba:43:6f:79:a4:79:21:60:f3:30:dd:29:6e:a6:
90:29:94:f2:47:e8:0f:bb:de:00:be:4f:98:05:bf:
c8:f6:9b:5c:9f:f5:a0:a6:ba:86:09:d4:11:c4:06:
95:a0:60:3b:85:90:7d:f0:e8:f4:af:13:79:c8:e8:
7a:dd:f4:21:02:f3:ae:7b:ad:4e:64:c3:51:95:bd:
a5:ea:89:13:b1:3a:01:07:d1:4a:7f:04:30:8c:ee:
96:79:ff:b4:d5:26:48:4a:49:04:be:b6:03:38:ec:
97:4a:c8:22:77:49:e6:52:c8:60:53:72:eb:b3:ea:
ed:a7:65:a2:d2:66:0f:e9:37:96:6d:3f:6f:6f:a4:
15:7a:ff:39:7e:79:2c:cf:11:dd:f6:c6:05:fb:a4:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:07:FA:38:7B:C0:F9:E4:1F:D1:C7:E2:29:E7:68:23:60:5B:06
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cb:45:d8:c2:3f:53:c9:45:cc:02:b6:0c:0c:a3:99:9f:53:
72:65:0a:e9:f8:b9:2f:e2:90:38:47:42:5c:e2:58:7f:b0:c1:
17:75:99:7f:39:f0:96:b6:aa:c0:90:fd:82:5a:8d:62:0c:57:
12:b6:d1:64:fa:f5:8d:c2:b4:eb:f6:d0:32:58:08:32:20:7e:
85:86:8a:0d:10:1b:71:4b:11:1c:3a:b6:96:36:42:c1:14:cb:
a4:e6:95:3a:0a:27:c6:2f:c1:31:1e:46:e3:65:04:df:ae:7c:
09:d1:63:a4:bf:12:fd:15:0c:78:c3:0b:a5:e0:d4:90:85:fb:
78:ba:79:02:7e:aa:e3:49:b6:c6:f0:74:69:9f:d1:6e:58:53:
e5:a6:f9:58:18:0e:f3:fb:9b:7b:64:22:4a:b4:6d:c4:68:36:
f9:3f:78:1a:87:0c:48:d8:2f:6b:a2:39:b4:a8:a7:d5:57:fa:
bd:3f:94:de:3e:09:a0:0d:14:c3:e8:75:01:55:4d:bd:68:55:
03:e2:7a:60:8d:cc:1a:d2:9a:2c:e3:0f:bb:cc:bf:98:3e:44:
c7:03:62:d0:2d:4e:10:eb:e8:f2:59:12:6b:94:18:5e:b7:eb:
6a:91:f2:31:65:af:7a:d1:d8:d2:f0:fd:14:ce:93:de:ab:34:
a8:bd:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:15 2025 by rpki-client