Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
File: diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json)
Hash identifier: MxXusLZ9HAJjVG/iXluGuodBI0hXW5DwsG5qhAyodMQ=
Subject key identifier: CE:28:E9:F6:EE:D6:F1:10:4B:8D:8B:3D:70:64:B3:5C:AC:0C:7F:74
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial: 01974779D15B33CC15D1E5D00E52A3DBD4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
Manifest number: 09E6
Signing time: Fri 06 Jun 2025 23:00:55 +0000
Manifest this update: Fri 06 Jun 2025 23:00:55 +0000
Manifest next update: Sat 07 Jun 2025 23:00:55 +0000
Files and hashes: 1: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: CryFWWcQ4T7Swd7ys8WCNl/GH99cz7me1wKfn1l8AbM=)
2: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (hash: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d1:5b:33:cc:15:d1:e5:d0:0e:52:a3:db:d4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Validity
Not Before: Jun 6 23:00:55 2025 GMT
Not After : Jun 7 23:00:55 2025 GMT
Subject: CN=ce28e9f6eed6f1104b8d8b3d7064b35cac0c7f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:83:39:3d:91:82:17:56:c6:51:f9:22:b7:
22:56:90:97:fe:bc:19:11:67:67:01:98:7f:30:da:
52:b0:4d:0d:16:5d:8e:4a:7f:24:d5:66:ce:81:87:
c8:40:c8:85:69:1c:92:0f:8d:8c:8f:e6:3c:3f:9d:
0e:7e:be:f3:df:80:c1:8c:37:b0:f4:c2:81:d6:d1:
0b:60:fb:d1:c8:28:67:c3:df:63:d6:02:c0:da:49:
98:df:33:5b:8c:ce:89:4a:4c:a7:2b:31:e0:5b:c9:
c7:b3:d8:23:59:70:dc:3f:ad:6b:7a:85:e6:0e:5a:
16:28:00:0a:be:b5:e7:2e:f8:31:68:a8:8f:59:ca:
76:90:90:88:6f:c0:b4:ad:9c:8f:a1:3c:d5:41:23:
fd:58:be:23:54:82:c8:94:4b:a2:03:38:71:a3:29:
11:7b:a7:02:4a:84:f5:e1:24:d8:08:64:87:47:6c:
82:b6:93:2c:70:70:2b:54:82:73:6a:5d:70:7a:12:
a5:a2:bc:0d:82:1f:3f:40:ab:f9:17:a6:87:a3:e0:
83:fa:50:8c:2b:66:46:62:7f:37:9a:2a:5f:a4:e4:
02:f0:f0:10:9b:45:5d:5b:c1:80:ee:e5:01:0e:49:
30:0e:fa:04:2e:c6:e0:73:36:bc:f3:14:b2:2d:b8:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:E9:F6:EE:D6:F1:10:4B:8D:8B:3D:70:64:B3:5C:AC:0C:7F:74
X509v3 Authority Key Identifier:
keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:af:c8:d9:95:6e:5c:5d:bb:e1:94:ef:b3:21:5c:99:e9:
5e:54:5a:b8:09:8c:58:5b:92:f6:1b:d0:c5:71:33:0e:55:cf:
f7:08:b6:19:37:01:76:f1:0b:4b:d1:2b:bb:6f:df:cd:a7:c1:
3b:11:6c:26:a0:da:74:d0:5f:db:44:f1:a0:27:3b:c6:77:0c:
df:ac:34:5e:60:e4:dc:52:9c:b2:c1:50:29:a2:20:8e:e6:ec:
33:fb:57:f2:92:5a:2a:e5:9c:c6:1a:43:38:ee:64:32:c5:1d:
a5:68:c4:ba:67:bf:91:43:61:30:78:95:2c:7f:77:eb:5e:ac:
02:13:2a:84:8c:64:6c:e1:a5:70:91:dc:a6:1f:18:4b:51:8e:
20:83:a4:5b:98:d4:b2:92:a0:9a:eb:b6:9b:5d:e3:12:13:f7:
34:ec:f6:e7:41:17:c5:2c:0b:d2:d0:ca:db:15:74:34:33:89:
5f:d7:d9:68:63:1b:70:f7:a7:18:37:d5:5c:04:c0:39:3f:22:
f6:7c:bd:e4:f0:15:19:0e:61:ee:dc:d1:bc:f1:d9:1c:8f:39:
84:19:d6:44:99:d2:6c:1e:aa:e0:18:81:fd:f0:30:3c:f3:58:
ba:36:1a:65:85:d6:c4:33:8a:8f:0d:5e:fa:a1:41:76:47:ce:
b2:39:43:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:46:51 2025 by rpki-client