Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: SwYhPytUJeooYAN5p5NQjZ4usj0RWIwiy/bbMtrmFhg=
Subject key identifier: 27:C9:42:7B:FD:70:4E:87:3C:A7:B2:93:40:A8:B6:A9:F6:39:96:5E
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0197499EDEDA6A0C12BCAD4080B9B83749B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 02FF
Signing time: Sat 07 Jun 2025 09:00:37 +0000
Manifest this update: Sat 07 Jun 2025 09:00:37 +0000
Manifest next update: Sun 08 Jun 2025 09:00:37 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: 2k2IF6TUKnZvs/926HjccWaraeEaWhFEOpIGgT/I6Gg=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:de:da:6a:0c:12:bc:ad:40:80:b9:b8:37:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jun 7 09:00:37 2025 GMT
Not After : Jun 8 09:00:37 2025 GMT
Subject: CN=27c9427bfd704e873ca7b29340a8b6a9f639965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:37:90:47:86:d4:e0:ce:8f:8a:8e:68:50:
5c:9a:34:50:7f:d9:9b:61:58:b7:2b:5e:0b:72:fb:
4a:5e:a7:93:69:94:c8:3a:07:f5:5f:60:a1:ec:57:
47:75:9e:40:67:e3:a2:b8:f3:67:42:03:9f:bc:9c:
82:1b:d6:10:9a:9f:f1:7b:a1:27:5f:94:43:7b:43:
38:bb:d2:85:16:60:a7:ae:43:89:a9:e4:63:f9:98:
3c:43:18:c3:2b:9c:08:61:7b:52:71:19:c4:2f:f4:
3c:7d:5b:17:5f:15:70:7d:a4:e7:4d:52:14:a4:9f:
bc:66:8a:8d:0e:76:99:89:d3:d7:b6:6c:ed:0f:90:
04:65:a3:9e:8d:8e:16:85:a4:33:2d:c0:f3:f5:5b:
7d:94:23:1a:98:c0:0e:c0:95:73:45:78:94:43:1d:
89:2a:e2:1d:53:93:43:59:26:1b:a0:64:09:c1:7c:
14:82:d4:9d:cf:39:48:0a:23:18:5e:f2:1e:a4:e6:
79:64:1c:9b:9d:dc:86:83:9e:a0:15:47:fb:fb:1a:
a2:01:9b:56:5e:70:e9:52:d1:f2:67:2c:e1:d3:a9:
92:63:43:fa:55:7d:fb:46:8e:f6:e0:2f:e3:bb:ff:
78:78:83:aa:97:b1:8f:17:97:a0:da:6c:cf:c1:f4:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C9:42:7B:FD:70:4E:87:3C:A7:B2:93:40:A8:B6:A9:F6:39:96:5E
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0d:a6:6d:e7:88:ff:d2:ee:e4:43:25:b9:cf:cf:c3:74:c0:
d8:93:b0:7f:96:42:a0:ff:70:b4:68:6c:e4:a1:db:82:39:6f:
b2:c5:9e:4d:93:77:36:f2:8f:0d:d6:fe:b8:32:74:9c:c1:e3:
9d:e9:8f:a3:e5:a4:d2:ee:af:56:b9:f3:85:bf:fd:19:d4:54:
21:d8:27:64:c0:4b:9f:94:72:00:bd:ef:b9:3d:24:bb:29:7e:
2b:d8:2f:70:45:05:09:dc:c7:64:88:c0:f9:f8:aa:81:32:a4:
04:87:cb:2e:1a:82:1a:91:fa:76:ed:40:96:1d:ab:c2:6a:4e:
18:ec:22:f8:ba:d5:bb:13:e4:21:8a:b3:20:54:d8:af:1e:10:
f6:bd:ab:8f:bb:49:e3:c2:42:80:f8:8e:aa:a9:f1:bc:52:5a:
17:df:61:bb:98:63:e9:ae:90:21:d2:df:1e:b8:eb:44:6f:49:
ed:f9:ab:26:12:97:ee:0e:e7:4c:c6:79:33:ab:20:3f:dc:b9:
74:9f:69:d6:b4:6d:70:ad:4a:0c:a3:db:fe:dc:44:f5:6a:7b:
93:21:51:3e:c1:96:01:18:57:f3:86:1e:56:2d:67:22:d9:41:
00:38:9d:e2:90:68:d4:76:76:30:ed:11:b7:76:41:db:0a:b6:
7c:ea:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:33:44 2025 by rpki-client