Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: y17IOx8Q/KFVn8mz+ORTaVNrnattPPB7P3nrmeCPxtM=
Subject key identifier: AB:8D:D9:01:82:ED:03:3D:EF:8E:43:48:1E:E1:84:A6:B0:0B:F1:07
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 01974D4483A2F5870F4012BFC7CCE94A418E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 02:00:25 +0000
Manifest this update: Sun 08 Jun 2025 02:00:25 +0000
Manifest next update: Mon 09 Jun 2025 02:00:25 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: VIH0GGtzNli3op0pOK3w8ZosmjfcKgGps/C2goqxsuI=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:83:a2:f5:87:0f:40:12:bf:c7:cc:e9:4a:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jun 8 02:00:25 2025 GMT
Not After : Jun 9 02:00:25 2025 GMT
Subject: CN=ab8dd90182ed033def8e43481ee184a6b00bf107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:22:a4:ac:98:99:9a:18:6f:cf:50:51:7c:
f0:f6:cb:ce:ba:db:43:ff:ed:cd:15:ca:25:1f:58:
39:c7:24:4e:29:37:76:e6:6f:10:fb:4f:80:5d:72:
b6:3a:12:33:d7:eb:90:b9:44:1f:b3:20:eb:de:78:
92:9f:bc:0f:99:25:57:4f:44:a7:9c:6e:a2:31:7b:
ee:2a:22:4d:7b:e5:3f:1f:d3:5b:a1:94:df:b2:fc:
49:14:bc:86:e2:fc:71:43:bb:c2:5c:ba:5e:fa:dc:
aa:2a:f0:8c:99:31:9d:87:ee:9a:ab:a3:6d:09:c7:
4b:40:87:e0:84:e1:c5:70:c5:f0:88:56:55:00:67:
4c:f1:d8:f7:f4:52:48:ae:3e:45:51:89:83:bc:e4:
68:19:7e:53:24:2b:49:f2:a5:29:96:98:1f:92:d0:
bb:f4:c0:b8:f2:b6:a9:87:7b:ee:21:31:e3:bc:08:
b2:55:ff:e5:64:35:71:4e:d6:e9:12:91:17:12:9a:
58:04:61:41:8a:ab:e5:82:57:eb:5d:a9:59:11:51:
78:6b:f1:d1:c1:cf:64:83:b8:dd:b8:82:8a:a5:f2:
14:04:5d:b7:cb:2b:be:d1:b4:1d:a1:b5:f6:50:71:
09:42:ad:88:ad:0f:a3:13:c3:9d:86:f8:ca:ef:ef:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:D9:01:82:ED:03:3D:EF:8E:43:48:1E:E1:84:A6:B0:0B:F1:07
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:34:2d:67:59:69:30:85:b4:75:72:38:12:de:c7:52:7a:f0:
5c:45:6a:96:cc:9b:44:be:dc:1e:12:39:8a:b6:94:ab:07:d4:
16:35:04:bf:0b:c1:1b:2e:ba:f4:f6:00:1d:6a:d0:5d:5c:8e:
10:ed:10:f4:bb:ef:58:b1:d5:f9:26:b2:e7:29:08:db:bf:6f:
34:e4:57:db:b2:1f:9e:74:0d:5c:15:97:c9:03:7d:f9:c8:00:
c9:9a:c8:cf:dc:55:66:f9:cc:0f:dd:20:eb:47:8c:65:03:cb:
75:75:d7:a8:ab:25:14:84:1e:33:f5:8b:08:00:e9:27:b1:cc:
46:69:ae:95:09:9c:52:bf:4d:56:4b:a1:73:75:f9:00:ae:e1:
37:81:88:47:59:3d:70:68:ef:6c:45:80:49:09:22:de:f0:18:
33:9a:38:92:b0:3d:32:a3:9f:3b:f3:7b:5a:bd:b3:32:b3:51:
4d:e9:bc:7a:81:53:ec:75:22:7f:90:7e:0b:d4:97:11:ed:fb:
f2:bb:ca:70:98:7e:ef:da:f3:8a:99:7c:e4:e0:c3:9a:b2:21:
0b:ba:8a:bf:7d:15:ad:e1:56:89:6a:6b:b8:53:bd:1f:29:dd:
b9:04:00:5a:32:97:7f:ab:c7:38:3e:c5:f5:87:42:61:8c:c2:
35:fc:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:26 2025 by rpki-client