Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: VCFjBLHIiMXvP+DQ9rSpR2pp4St67igQXpcQiGnSbkI=
Subject key identifier: EE:95:51:58:6F:E0:68:80:CB:6E:73:17:56:56:3E:4C:1F:17:53:D8
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019749D5FE48D74717DED15136F8E4743CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: aHwuJUms0QzEclbAKNqAZNGEgjq4YfukH6vyP6Z2A8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fe:48:d7:47:17:de:d1:51:36:f8:e4:74:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=ee9551586fe06880cb6e731756563e4c1f1753d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:f7:34:de:04:72:fc:5b:e6:80:15:cb:c1:
bc:25:c6:c4:21:39:59:98:aa:d7:37:14:e3:8a:4f:
1a:4d:0b:34:f7:15:79:bd:1c:28:a9:ca:89:22:6d:
86:22:e4:95:6d:74:60:ae:c4:d4:ec:58:be:6f:f3:
9e:c8:0d:de:08:97:dd:97:99:f3:53:c8:2b:3b:f9:
db:e0:25:bb:48:59:58:65:d4:44:a7:6e:27:95:f0:
2a:fe:f4:d5:6c:e5:24:68:4c:1c:93:cd:40:0b:02:
f5:fe:52:c9:df:85:fd:b5:9f:61:fc:57:d3:a6:87:
72:90:27:5d:20:aa:49:52:d5:81:20:d9:22:bd:a4:
77:a5:27:b5:f5:b8:db:c3:6a:44:8c:ba:e4:d6:91:
a4:ab:fc:4a:b4:ca:95:53:ac:aa:37:6c:0a:0d:cd:
f0:0b:13:04:7d:4d:66:ef:2c:b5:fa:9b:ab:b5:86:
0f:41:e4:ba:20:c1:09:0b:89:ec:d9:a1:76:24:d4:
61:d6:71:86:46:6a:4a:bb:b1:a0:03:8c:5c:11:4f:
b9:3e:8a:c7:6c:80:18:08:2b:0f:ed:b4:97:09:19:
50:b7:f9:fe:b6:36:a8:30:c4:05:33:53:34:4a:1f:
ac:10:6e:ba:15:c6:3b:51:54:11:dd:17:62:fa:4d:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:51:58:6F:E0:68:80:CB:6E:73:17:56:56:3E:4C:1F:17:53:D8
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:9b:b2:4c:fc:96:35:6a:ee:09:e8:7b:ed:8e:ea:80:8b:
b0:d2:40:a1:d9:e6:ae:6e:52:c7:97:fe:dc:b0:a3:7b:c5:c6:
87:3d:8a:c8:e1:60:5e:8b:69:f8:09:12:10:6f:ee:17:86:60:
0c:be:49:61:50:c6:4b:d0:bb:a0:c4:74:d0:9c:98:7b:21:c8:
61:17:cd:72:04:b7:23:e5:fd:0e:2f:59:53:78:54:3d:22:3f:
a2:a3:5d:79:c0:e1:d8:25:51:70:75:46:a8:e7:94:89:f6:35:
02:a7:77:d1:2c:ce:63:39:04:d3:e3:ec:49:a3:d0:3c:db:81:
43:5c:58:fb:cf:ed:3f:49:fc:ea:c2:ec:1e:8c:05:68:50:2b:
44:82:c0:58:63:b1:18:4f:22:36:e5:a2:e7:21:40:b6:c5:ae:
d7:ad:45:24:d7:d2:19:f0:3c:c0:12:61:3d:3e:7a:88:15:f2:
86:9f:1b:7a:37:7f:ee:c6:d1:4a:dd:04:17:c9:de:bb:0b:12:
5c:0c:63:99:5a:50:7b:f5:3d:15:f3:bc:da:94:38:54:26:4a:
aa:aa:50:9a:f8:eb:d1:13:2a:0b:bf:10:11:46:66:3e:80:eb:
73:a1:41:a7:d9:e5:67:47:53:46:0f:9d:4e:61:c5:e5:9b:0c:
cb:ac:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:28:23 2025 by rpki-client