Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: yG5GXQyBO7EKxAhxsWsdMK0xa5TZPPZB9BNJfcrVIK0=
Subject key identifier: 84:A9:4E:67:95:47:63:6C:BB:7E:98:7E:8C:F6:F0:69:8E:D6:BD:A9
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 019747E779D059774CCDE147247CBD055127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 1292
Signing time: Sat 07 Jun 2025 01:00:41 +0000
Manifest this update: Sat 07 Jun 2025 01:00:41 +0000
Manifest next update: Sun 08 Jun 2025 01:00:41 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: kYhjJQTPdRm+djsXIKOxvW2bVUBoW9RooL46yhP2haI=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:79:d0:59:77:4c:cd:e1:47:24:7c:bd:05:51:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Jun 7 01:00:41 2025 GMT
Not After : Jun 8 01:00:41 2025 GMT
Subject: CN=84a94e679547636cbb7e987e8cf6f0698ed6bda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:ef:ff:62:32:b4:c3:43:67:5f:99:53:57:
31:8a:58:c6:ad:bc:c6:68:33:d8:59:41:80:ff:49:
ef:c6:43:28:83:b9:b5:4b:be:33:34:fb:33:21:b6:
a7:e1:d4:d7:a2:95:63:99:db:ea:a4:d3:6f:60:e4:
fd:72:71:50:0a:dc:e3:f8:b4:49:a2:e4:83:40:4c:
4f:dd:6a:28:79:3c:05:f3:43:ac:cc:64:fb:80:87:
2a:53:3a:32:ef:4d:1b:8e:8c:74:c2:88:4a:8c:e5:
8f:64:7c:2e:75:42:7e:2f:42:6f:ff:ee:bf:ae:43:
3d:16:c8:f0:4d:47:99:ae:c7:3f:8e:b6:bc:be:77:
5f:a1:a5:e3:2f:55:89:59:54:b2:29:f8:a9:99:52:
d7:a9:6b:e6:f2:20:81:13:18:d6:f9:3c:bd:75:4d:
31:b4:e6:12:fc:72:7a:7e:20:03:2b:70:22:be:5a:
ee:f7:75:75:4c:20:93:f1:e9:52:0b:b3:de:9e:4a:
e7:f6:bd:4f:90:a0:e0:59:28:50:74:ce:e1:20:94:
95:cf:a8:19:93:45:c3:ea:f3:83:30:7a:80:eb:e2:
59:4a:f8:0f:71:19:a5:4f:f0:5a:e3:1e:63:ab:68:
eb:80:df:da:57:b6:aa:d3:fc:78:71:86:c9:b8:27:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:4E:67:95:47:63:6C:BB:7E:98:7E:8C:F6:F0:69:8E:D6:BD:A9
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9c:ef:70:bd:e5:a2:de:b7:4d:e3:db:63:f6:86:76:5d:55:
78:9b:ba:b5:59:00:bb:be:9f:8c:80:d4:d3:82:82:e8:6f:ba:
74:06:47:60:4a:97:2c:c0:97:6f:da:ce:5e:49:8d:7a:48:55:
aa:2b:15:94:ab:15:90:1e:03:a2:d6:c1:ed:e3:36:23:83:00:
dd:1d:3f:a4:0b:b2:54:ea:8f:39:56:e3:fc:48:c9:7f:47:bb:
b9:dd:40:9b:f6:23:a2:fa:26:03:a9:2d:b2:2f:de:6b:6a:ee:
ec:2c:38:97:7a:f1:6a:9b:7a:7a:15:1c:a7:4f:97:92:f4:d9:
07:0b:66:d5:ee:4a:f1:cc:01:23:55:7b:b0:c6:36:70:11:ad:
a5:87:70:02:65:69:b0:cf:9b:2d:a0:e5:cc:84:e9:d8:ec:d6:
7e:3f:70:d9:9f:3b:b9:0f:2b:54:9b:98:63:03:86:0a:a4:8a:
68:fb:0a:90:1f:2e:e5:b3:dc:25:77:dc:be:83:6e:d2:88:41:
48:0d:86:37:93:e0:f6:6a:4a:df:ff:45:83:0c:5d:8a:5f:7e:
2d:b4:d6:b5:1d:1d:0d:fb:e9:09:4e:77:6b:59:02:97:68:49:
1e:1c:fc:ee:dd:cc:76:45:0a:0b:0c:db:3b:c2:70:3c:3a:ce:
7a:70:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:18 2025 by rpki-client