Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: B+3PLNoMcxGVob+PTXbWWBtOpjpmZsUOcD9AGaZVTSQ=
Subject key identifier: 1E:FA:55:EE:D2:B0:AB:80:BB:CE:69:5D:F0:32:F9:94:A0:0B:7B:56
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 0197488C39164A86930252092C68800FDB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:00:38 +0000
Manifest this update: Sat 07 Jun 2025 04:00:38 +0000
Manifest next update: Sun 08 Jun 2025 04:00:38 +0000
Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=)
2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: 6tyPwHHCv3Uko4bxqOqjhdEsJwR51SX0giHRirIoxGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:39:16:4a:86:93:02:52:09:2c:68:80:0f:db:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Jun 7 04:00:38 2025 GMT
Not After : Jun 8 04:00:38 2025 GMT
Subject: CN=1efa55eed2b0ab80bbce695df032f994a00b7b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:c1:22:95:2f:2a:99:9a:5a:85:ef:8b:89:
8d:b7:36:fe:cd:15:39:d4:55:34:ab:f5:4a:dc:e0:
c3:0d:36:41:f2:b9:f6:11:c1:55:a6:3b:a8:4f:75:
b4:c2:80:4a:07:8a:a8:b8:6d:13:45:82:31:d0:eb:
13:f0:d6:b6:a6:82:db:c8:c5:45:a5:15:6f:cf:ec:
29:70:28:fe:e6:41:14:de:a9:60:87:2b:db:b4:f6:
98:d7:8a:18:77:d4:0b:74:13:ec:6b:12:2d:d2:04:
dc:08:77:96:f0:40:41:8f:2f:82:40:b1:64:c4:81:
f3:ce:e0:a5:3a:42:97:00:d6:97:40:08:6e:7f:a9:
d1:ba:ae:be:21:4e:52:0f:79:63:79:bf:14:0b:7e:
e6:fc:83:81:bb:0e:6b:14:00:57:46:92:c4:04:52:
95:49:de:a7:b9:d8:f4:6e:93:19:19:42:69:62:27:
d0:93:5d:37:67:99:de:9e:e5:24:c3:c2:04:b8:6a:
13:14:84:00:b9:9b:97:98:46:b7:fe:da:65:52:95:
c5:77:03:04:13:77:f4:ef:84:bf:15:4d:59:59:91:
80:d8:3d:2d:c7:10:e5:88:6a:01:92:c2:56:55:37:
ea:1e:f5:2a:df:2c:fa:9b:67:cd:91:c2:ce:63:a5:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:55:EE:D2:B0:AB:80:BB:CE:69:5D:F0:32:F9:94:A0:0B:7B:56
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:22:e6:6d:cd:f7:41:a2:37:ca:3d:f1:ee:ed:4d:92:03:
b8:06:fb:0b:68:7f:d9:8d:b6:9c:cf:11:4f:cd:1f:2d:f1:72:
29:90:b0:37:15:5f:e0:dc:51:ba:4a:20:10:98:5b:00:99:9c:
7c:97:18:cd:58:76:ed:bb:7f:6f:69:b4:6b:f6:88:b6:5f:08:
4a:6b:13:ea:c8:26:e8:5e:00:9a:69:b2:22:2f:04:36:f8:b8:
9b:cc:cb:66:49:4b:ab:24:43:d8:a7:1d:bf:c4:89:45:50:55:
08:45:57:43:d6:1f:3d:21:56:71:ed:d7:69:e9:3c:a5:00:a7:
b6:25:98:e6:3d:06:5d:b3:fb:3a:07:1e:0a:d6:e6:d4:69:b3:
c6:1b:1d:84:46:f6:24:f4:50:34:7b:3f:f8:3c:ee:f6:08:99:
55:19:b0:bf:93:2a:d5:28:7b:be:12:f9:c0:c3:a8:98:f1:d3:
b4:2e:e8:b3:27:eb:93:08:55:cb:90:56:24:ab:76:e0:f2:63:
e8:5f:0a:8b:4e:fa:d7:21:39:92:4d:2a:96:fa:e9:3b:a4:3e:
ef:dc:af:53:c8:b5:be:56:4c:6b:d2:9d:99:7c:18:b7:f6:fe:
94:b5:bc:07:12:9b:25:b8:d7:04:58:17:47:ec:2f:d5:0c:07:
b8:74:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:07 2025 by rpki-client