Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: Y7/rI8/KdA/TM7rXKJ88pUgKhEhgvx0XEY3qcL2mGPI=
Subject key identifier: A0:09:79:06:99:97:03:EE:F4:90:79:49:E2:D1:5A:DE:28:04:11:68
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 01974666D523C60E6F26925EBF7F9284104F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 02DC
Signing time: Fri 06 Jun 2025 18:00:33 +0000
Manifest this update: Fri 06 Jun 2025 18:00:33 +0000
Manifest next update: Sat 07 Jun 2025 18:00:33 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: YodsojcGeZXoKvlemlmhcXYK6F5Y/aAHX1x6DDAOZBE=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:d5:23:c6:0e:6f:26:92:5e:bf:7f:92:84:10:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Jun 6 18:00:33 2025 GMT
Not After : Jun 7 18:00:33 2025 GMT
Subject: CN=a0097906999703eef4907949e2d15ade28041168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:36:7f:65:cd:be:a7:9b:e8:49:dd:1a:3e:
ad:f5:1e:78:d6:51:09:f4:07:99:dd:00:7a:29:f1:
66:19:44:b3:a3:e0:0f:db:12:a3:62:33:46:1b:c1:
5c:ba:20:b3:e4:d6:e9:ef:be:c2:9d:25:58:49:9b:
3e:a2:4d:8f:a6:5a:5f:f3:94:f5:d6:e9:9b:f4:34:
e4:e0:d6:9c:fe:47:1d:ed:e7:e2:20:47:ee:39:18:
12:2f:61:94:4e:9f:99:45:3c:b3:26:83:a9:18:86:
ce:e3:92:26:0f:30:2b:92:dc:c3:c4:78:07:22:8c:
bc:5c:7d:19:be:ce:6b:10:a0:b3:55:fc:65:66:36:
46:aa:88:f8:95:77:ca:8c:69:bb:53:b9:f0:59:1f:
7f:a0:c7:2b:79:84:90:1e:e8:f6:2f:ab:a9:2c:6e:
58:23:7a:83:c8:e0:7b:6b:a0:6e:40:9e:25:12:f7:
0f:19:e2:b4:a9:2c:fc:b0:6f:be:71:b7:d0:27:1a:
46:a9:6a:05:0c:75:64:4c:84:9e:c3:7e:68:49:05:
de:a3:2d:f4:d6:de:05:6d:b2:2e:82:bc:8c:05:f2:
36:04:31:c9:2f:08:81:97:e8:ae:ec:ac:a2:a3:86:
e6:9b:12:57:e8:a1:3b:c6:1c:42:e3:40:86:ab:02:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:09:79:06:99:97:03:EE:F4:90:79:49:E2:D1:5A:DE:28:04:11:68
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:29:ba:2d:e7:2a:74:26:b6:a7:50:1e:b7:5d:58:49:ef:13:
8c:c7:67:e2:64:b7:83:14:cc:91:86:bd:4d:06:cb:49:1b:0b:
2f:7b:3e:1f:7c:9f:eb:2b:3c:bd:e7:fa:97:7e:a1:1d:57:3a:
7f:3a:ff:23:dd:e6:29:86:ce:97:a5:6b:ae:db:cb:f6:8d:da:
94:95:c4:42:79:d9:1d:cc:2f:8f:d1:70:2a:07:7c:e5:0e:90:
f8:09:df:d5:cb:e0:bf:c2:81:b6:7a:82:5a:e0:a8:79:bd:2b:
d1:55:d0:00:ae:7d:1a:7a:de:a2:f4:ee:1e:eb:40:0a:73:4b:
94:51:71:01:0f:95:ff:8f:0b:29:c6:9a:bb:4e:23:8b:87:df:
a4:9a:62:38:f1:63:37:e1:e1:6d:cb:ea:b2:e9:ee:1c:8a:d3:
e4:d0:8b:a0:cf:1d:4d:77:5f:09:1a:ec:93:bf:36:e1:5e:38:
51:3b:22:e6:12:d7:0f:e5:1d:c2:cb:c6:83:66:4c:8c:9b:65:
40:10:20:1e:c6:f1:3f:21:c6:91:7a:a4:2e:8b:e5:3b:d8:9c:
c6:43:93:5e:8d:11:8b:63:17:eb:a7:c5:81:e3:ed:65:27:2f:
b6:44:94:45:45:38:fe:c3:d0:5e:fe:3f:84:a5:7f:26:b9:5e:
f7:01:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:47:50 2025 by rpki-client