Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: 6ztUKqX5QwRXMnrlYmHScYYkmPXzdVMfWbViVq4d5iM=
Subject key identifier: 16:9B:8B:56:4A:B6:E8:8E:9E:DB:A8:DA:30:22:B7:3C:4C:F4:24:5B
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 01974D44B280170807A12BBED0C82F46DFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 01C6
Signing time: Sun 08 Jun 2025 02:00:36 +0000
Manifest this update: Sun 08 Jun 2025 02:00:36 +0000
Manifest next update: Mon 09 Jun 2025 02:00:36 +0000
Files and hashes: 1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: mPLXo9X5bZuGkT6tk5jszWLqGuh+ac0n4G7yZjTMenY=)
2: jugqzSPR-0ldHom0_xkR53XyLHs.roa (hash: +3psaXdJuyPggmQWBeIUw9hKrdTT6O3Z6jepxI5OERo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:b2:80:17:08:07:a1:2b:be:d0:c8:2f:46:df:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Jun 8 02:00:36 2025 GMT
Not After : Jun 9 02:00:36 2025 GMT
Subject: CN=169b8b564ab6e88e9edba8da3022b73c4cf4245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:14:f3:f4:a8:64:b2:ee:75:b9:92:52:0c:
77:7f:28:0f:c0:ab:8a:e5:d4:8f:ab:60:e5:d4:cf:
70:5c:3c:f6:cf:e2:2e:95:0b:3e:43:83:6f:c3:c7:
7f:cf:5a:7b:66:8c:6c:5d:a0:ea:7d:13:5c:6d:7b:
4d:2b:75:df:d3:3e:03:c6:33:28:1f:44:f4:f0:ad:
41:40:a2:c4:84:0c:02:96:79:37:2e:68:99:45:5c:
6c:21:1c:cd:8f:f7:e0:89:92:ee:af:f0:98:60:81:
69:52:13:00:a7:c4:02:8d:b4:84:a0:f2:2b:d4:29:
c9:7d:fb:89:27:e8:49:ec:3f:7b:19:71:ee:27:72:
a6:db:9f:e1:ec:ce:1d:90:7b:de:9b:61:ab:65:53:
38:d6:ac:d9:14:dd:2f:3b:9f:d6:ca:7c:e8:0a:ee:
ca:f9:18:c9:09:08:fa:ae:b7:8b:43:65:6f:a5:68:
aa:6b:0f:35:b7:fd:a8:31:0a:1e:fb:ff:d3:41:77:
10:27:8a:82:df:41:90:4a:da:13:ea:7d:68:c0:c0:
37:7e:01:8f:51:3a:af:14:9d:7f:85:ba:34:01:7a:
ee:92:e0:22:45:55:cc:a2:9a:29:16:66:52:a8:73:
bb:72:a7:97:8d:5e:95:ab:24:7b:20:15:af:a4:dc:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:8B:56:4A:B6:E8:8E:9E:DB:A8:DA:30:22:B7:3C:4C:F4:24:5B
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3a:f4:c8:f8:47:b2:bc:03:bb:44:49:80:17:6c:5e:cc:66:
e4:49:8a:d3:52:2e:e9:6c:8e:6c:ae:37:2d:43:dc:66:ca:83:
b8:a3:e6:12:fb:ed:a3:f9:f7:58:b6:f6:e8:23:4b:2f:fa:09:
15:e6:58:66:c5:57:90:f5:d7:bc:54:a6:21:0f:6f:97:9c:65:
01:cd:b0:98:10:46:a9:de:62:c0:7c:24:04:de:a1:6c:2d:f2:
36:5a:9c:48:87:18:f7:1b:49:16:86:ac:09:43:7e:ab:46:32:
63:d9:56:a7:10:57:7f:1f:dc:db:eb:1d:5c:36:a4:27:36:bc:
f9:90:b7:77:56:d0:84:2d:b0:6f:7e:b5:f5:bf:86:7a:ab:a6:
ca:0d:cf:29:d3:da:93:3b:bf:0f:29:f0:7f:eb:95:c5:10:22:
74:ad:f7:52:c7:a0:ae:aa:4a:2d:f7:83:36:9b:79:98:8e:c3:
95:77:bf:67:53:47:1d:aa:a1:f1:12:37:63:28:bb:92:c5:fe:
80:2a:f1:18:88:7a:19:1c:8c:2a:6f:05:f7:2d:ad:25:e3:48:
85:82:45:fe:a5:48:86:e1:e3:56:20:58:5b:b1:31:34:21:68:
90:db:44:c8:ce:1b:24:33:4f:61:ed:76:2a:ad:37:55:22:a7:
e8:dc:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:21 2025 by rpki-client