Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: uxSPbz2pNVH0PBrvBXvy47XioecwolHSGRmu31TW9P0=
Subject key identifier: AF:CE:61:CF:AD:B2:2F:6D:EC:00:F1:BD:29:31:94:3F:6D:2A:CF:47
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019753EBAA9671337894C17ADA7733B87BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 01CA
Signing time: Mon 09 Jun 2025 09:00:42 +0000
Manifest this update: Mon 09 Jun 2025 09:00:42 +0000
Manifest next update: Tue 10 Jun 2025 09:00:42 +0000
Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=)
2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: XE+SX6WEJ3Z3x9RPrKiX6bePpTQtQOdZrWQh481zUxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:aa:96:71:33:78:94:c1:7a:da:77:33:b8:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Jun 9 09:00:42 2025 GMT
Not After : Jun 10 09:00:42 2025 GMT
Subject: CN=afce61cfadb22f6dec00f1bd2931943f6d2acf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:97:5d:9a:c1:60:89:2e:9f:5c:8d:73:d7:
91:f2:4f:0c:12:84:a8:ce:3f:e4:b8:6a:a4:1e:99:
7b:df:06:c5:ea:88:5b:93:a8:79:8f:be:6c:db:35:
9f:47:17:ef:0e:c7:71:e7:af:90:dc:69:57:37:8b:
83:f6:82:8e:ce:e0:b1:ad:99:3a:17:db:97:d9:87:
c3:cc:79:2c:f5:a8:5f:5d:f2:3f:4e:ee:97:67:26:
c9:ea:ae:69:f9:97:c5:3e:f5:67:2c:17:aa:38:53:
a0:42:d0:53:ac:29:b0:53:42:ae:11:34:be:55:e7:
d3:a0:38:1c:dd:90:c8:e0:6e:f1:bb:69:42:05:d8:
f6:9b:9c:a9:fc:c7:6c:e9:5b:89:2e:13:65:2c:7e:
56:a7:31:52:61:ec:6c:b2:50:70:ca:73:c4:3e:44:
35:da:6e:de:90:91:bb:03:4d:0c:d4:c3:88:83:2f:
e4:ae:b2:82:c4:1e:af:6e:fa:9a:c5:97:00:b5:c1:
d3:38:00:0a:4b:37:9d:dd:9b:4b:76:a2:1b:32:5f:
2e:1e:5c:c7:04:b3:bd:2f:31:52:3f:f5:d6:a6:c6:
9b:28:bc:24:88:f8:a0:71:0d:cc:bb:17:35:11:ca:
31:e0:3b:5f:15:6e:24:21:b9:89:09:6c:bb:30:5b:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:61:CF:AD:B2:2F:6D:EC:00:F1:BD:29:31:94:3F:6D:2A:CF:47
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:71:10:b7:e3:2b:2f:c2:a1:41:38:42:c2:94:6e:fb:41:
66:10:87:94:7d:46:38:94:c5:fb:39:cf:c0:bb:ba:41:48:1b:
b1:cf:11:16:d6:bd:9c:63:ce:c1:09:6d:b3:cb:d6:41:4c:ee:
60:76:59:52:9e:da:6e:d0:6e:95:13:3e:51:96:b6:e4:45:48:
35:7e:45:6b:33:7c:e6:9e:ab:ec:f3:c1:fe:65:a0:ee:38:9e:
0f:64:0d:e5:0e:08:ee:01:97:e5:a8:03:3f:68:5c:69:c2:a6:
e4:f3:47:16:5a:6a:f9:73:aa:21:a5:47:24:a8:71:e4:0d:4b:
62:7d:52:8f:72:e9:cc:59:bc:8e:25:de:da:54:fe:91:77:c8:
f1:2a:b1:02:6b:88:f2:71:b0:0c:c5:ac:6c:c2:40:0c:d8:60:
6c:13:98:9c:7c:30:b2:58:52:44:40:99:37:61:b0:d4:db:08:
26:d3:c4:5f:aa:bd:cb:19:99:65:b4:62:ce:e3:41:ea:7a:88:
b7:5a:d4:7a:e7:cb:5d:b5:5c:fe:b4:fe:7d:a0:c7:2b:e9:37:
04:fb:36:c5:40:e7:3c:de:82:f0:06:3b:ef:87:c3:2a:ff:21:
4e:a1:37:12:be:ba:ba:23:1a:c0:dc:4a:ca:10:35:bd:8d:a3:
f5:d4:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:16:56 2025 by rpki-client