Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: lK4LfRuQVXpd6HN/RCT7hFyzbKqFuohK1HMu5YNAkks=
Subject key identifier: 60:F0:25:63:16:6C:D9:14:68:C5:C7:1A:3E:42:0C:25:FF:6C:BB:0B
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01974D7BB0A02E62B7E98E0EEE106C23DB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 12A6
Signing time: Sun 08 Jun 2025 03:00:40 +0000
Manifest this update: Sun 08 Jun 2025 03:00:40 +0000
Manifest next update: Mon 09 Jun 2025 03:00:40 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: 3B2DjiUKbJworexJNSgSp6fAWVauYkiN1eExj0uYRjw=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b0:a0:2e:62:b7:e9:8e:0e:ee:10:6c:23:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jun 8 03:00:40 2025 GMT
Not After : Jun 9 03:00:40 2025 GMT
Subject: CN=60f02563166cd91468c5c71a3e420c25ff6cbb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:42:70:87:52:cc:25:03:59:b6:ed:d7:93:
48:ed:18:1b:13:90:c9:64:5d:e8:f2:99:19:78:74:
c9:e3:eb:11:23:a5:f0:69:4f:9f:cd:c8:36:5f:3e:
e7:e1:da:1c:d9:8c:70:3a:5f:97:37:3c:38:59:f1:
1f:bf:72:f1:db:33:c5:a2:d0:5c:4b:e1:03:4a:2a:
2e:0a:75:0a:d3:aa:3c:99:74:c1:71:48:71:80:e3:
49:86:eb:79:03:2c:fb:02:31:c0:19:72:56:e7:50:
94:bb:85:25:8a:9c:91:3d:b4:73:35:3f:b4:c5:c4:
76:06:d9:96:78:0f:64:39:9b:57:b8:d2:ba:a8:89:
21:e0:9d:26:35:55:65:dc:ab:2f:14:92:29:0a:ef:
32:d6:1c:1b:26:78:c1:fa:68:2f:1b:ad:05:a5:b3:
95:59:ef:cf:31:6e:5e:e4:0c:03:84:20:75:81:52:
dd:06:84:0f:6f:9b:a4:4f:29:2c:f7:5a:f6:46:6c:
1b:d5:db:68:2e:51:f0:24:11:35:21:64:1d:60:b7:
27:df:b5:b4:a9:30:0e:27:08:e2:4d:0e:f6:db:c1:
dc:58:21:24:43:f5:02:a5:2b:96:8e:bc:bb:5e:12:
f1:6c:5d:52:f3:49:db:6b:55:de:3e:e5:e8:c2:5c:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:25:63:16:6C:D9:14:68:C5:C7:1A:3E:42:0C:25:FF:6C:BB:0B
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:96:aa:02:f2:a2:05:75:14:ab:d3:a6:50:80:60:ea:ca:
dd:a2:92:29:d6:00:0c:4f:53:f4:70:11:68:eb:a9:1c:8d:13:
46:69:05:18:9b:7d:61:d0:6f:81:76:30:73:41:ef:e1:a1:3b:
d1:fb:e1:41:4d:8e:8f:dd:c8:88:83:7b:da:e1:82:ab:41:8a:
1a:cf:55:ed:2c:bc:44:07:ef:54:e1:fa:1a:6d:35:d1:8c:ee:
d1:3e:10:c2:2b:7c:0f:64:83:36:0a:cb:bd:67:ed:b4:4c:1a:
3f:e1:ae:25:fd:b0:5e:19:da:16:37:13:8a:27:d9:f5:b8:98:
d1:1e:aa:21:59:87:00:7a:36:4e:6a:c9:24:46:69:cb:a2:1b:
eb:e4:00:2c:cd:a9:48:a3:89:92:95:17:f0:6f:65:fe:33:79:
22:d9:15:3a:91:32:f0:e6:c1:71:85:13:2c:0c:bc:2a:74:45:
8f:02:b5:1d:e1:96:f3:90:78:00:ff:8e:4d:1e:a9:89:44:5e:
68:7b:aa:75:8b:13:a5:a4:af:38:2d:83:f9:d0:74:85:32:75:
0d:da:f8:4c:41:b0:ec:c0:0f:a9:d4:2d:63:1d:2e:83:d6:8f:
ab:62:8b:39:4f:4e:7d:49:12:42:28:99:55:3a:4b:6c:a0:28:
43:b6:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:11:57 2025 by rpki-client