Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: ZrVS8lNsf5FUqhzkRauk762uSeNIokdwbKj+rv9tWv4=
Subject key identifier: 85:E1:D9:15:E8:10:C5:A0:6E:DC:0D:6B:58:1B:70:D1:FF:58:A4:03
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 01984287EDE767B5404EC836D7D777AB1D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 12BF
Signing time: Fri 25 Jul 2025 17:01:01 +0000
Manifest this update: Fri 25 Jul 2025 17:01:01 +0000
Manifest next update: Sat 26 Jul 2025 17:01:01 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: 3RbLTPqFKTFdzhdPsq4g0qWt2I11ykX+0voTuRs5UDc=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:ed:e7:67:b5:40:4e:c8:36:d7:d7:77:ab:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jul 25 17:01:01 2025 GMT
Not After : Jul 26 17:01:01 2025 GMT
Subject: CN=85e1d915e810c5a06edc0d6b581b70d1ff58a403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:48:d5:1b:44:96:35:ed:7e:97:69:40:28:
a3:d5:c9:9b:63:9d:e4:d5:31:9c:ef:de:f6:4c:5e:
da:05:84:39:5f:c5:d7:1e:99:0a:f7:50:b8:d8:01:
ef:56:f7:9b:dd:d8:94:12:f9:a1:c1:db:2d:9c:c5:
c7:51:93:56:ee:22:28:f0:65:e1:31:58:02:0b:ba:
13:2f:17:13:34:7c:71:71:4b:98:f3:ff:2e:cb:ce:
ce:a6:41:cb:39:a8:21:cc:fa:19:5e:7c:d6:a1:6d:
0b:3d:3f:d4:5f:4d:00:80:46:b8:5f:59:11:23:fa:
e6:1b:66:16:c6:ec:c8:52:64:9e:5a:96:76:6f:f1:
0d:5a:46:dc:26:fc:81:a4:73:00:af:9a:aa:38:e6:
29:86:30:05:28:6f:0d:0b:eb:29:7d:c0:23:e8:fd:
aa:98:67:7c:22:62:07:d2:62:1c:b1:81:7a:0b:47:
cc:9e:eb:9b:ad:a9:36:98:74:59:b2:a1:fe:53:b4:
76:9e:91:b4:2c:91:b4:ac:9e:8d:c0:4d:36:7c:7b:
26:ec:01:50:15:12:f6:38:eb:e3:45:7a:ee:2c:3f:
05:5e:48:97:e1:06:c5:6c:95:47:fa:c0:76:1d:90:
00:2f:4f:bb:d4:25:fe:b3:ef:f0:b3:18:fc:38:28:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:D9:15:E8:10:C5:A0:6E:DC:0D:6B:58:1B:70:D1:FF:58:A4:03
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:60:30:30:5f:43:b7:bf:8e:28:7c:82:8d:4d:fe:1b:d8:
0f:d3:2c:a2:5f:23:d4:77:09:40:1d:91:7b:50:bc:02:a4:4b:
df:d5:17:8e:0f:5e:2e:48:5f:71:0a:46:89:8f:38:70:2f:61:
ee:0d:56:0a:24:ba:03:4d:88:c7:e8:c8:e4:b6:b0:94:88:34:
65:14:e1:63:cd:d0:f7:f7:ad:ac:7c:3c:79:81:31:77:e9:8d:
88:9e:ee:50:4d:8c:11:e0:2a:da:1c:83:68:ef:4f:d2:94:56:
06:4c:9c:c3:b8:86:36:0e:85:5c:6e:d3:db:7b:8d:09:20:7e:
70:b3:1f:39:24:e5:6c:f7:d2:b0:cf:9f:2a:d5:09:26:19:79:
e3:8f:0b:4b:85:3d:de:72:5e:71:3e:75:0a:93:18:42:89:73:
b7:79:ea:a0:17:af:5a:b7:50:58:69:91:05:3c:ba:3f:5b:81:
d2:12:74:07:32:c6:bf:55:92:91:b3:f2:67:0a:e7:cd:24:60:
6a:b9:72:98:b4:03:31:09:0a:48:ea:b3:c6:cf:3c:ac:43:87:
c5:bc:be:6a:bc:0e:27:c2:4c:9f:47:5a:dd:6f:85:0c:bd:cd:
31:b2:28:f9:71:5a:99:d9:ca:3a:fa:f0:e7:c1:29:3d:23:2b:
c4:97:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:19 2025 by rpki-client