Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: ttIKn8kLwbaB9m4+8w3H5tShZZGISELS3bf+7CEK4/0=
Subject key identifier: 63:35:BF:97:C2:FB:2F:6F:6A:7F:F1:1E:BE:B8:69:90:BC:0A:92:91
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019853B2379901E34F49AB2BBE99C828949B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 025A
Signing time: Tue 29 Jul 2025 01:00:45 +0000
Manifest this update: Tue 29 Jul 2025 01:00:45 +0000
Manifest next update: Wed 30 Jul 2025 01:00:45 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: U1EX0slPuGHOsxn1FXuWXnCTNL5+DlBzO+bHRIASsSc=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:37:99:01:e3:4f:49:ab:2b:be:99:c8:28:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Jul 29 01:00:45 2025 GMT
Not After : Jul 30 01:00:45 2025 GMT
Subject: CN=6335bf97c2fb2f6f6a7ff11ebeb86990bc0a9291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:da:70:80:9e:e8:83:70:2c:ca:03:f5:39:
1c:79:ff:16:b7:1f:97:5c:0a:4f:46:3c:9d:69:c8:
ee:16:75:8c:61:ab:d9:08:c4:db:93:05:cf:ee:7e:
f6:0b:95:d4:c8:cb:8f:82:f3:80:7b:52:2e:a5:4d:
fb:57:a4:d0:92:25:54:f2:c0:07:a5:9e:4b:11:55:
ba:59:b8:a3:05:0f:cf:1f:8c:9c:a4:6c:7a:ca:71:
18:f0:2d:89:09:f8:97:c3:45:12:6a:3f:08:4d:b6:
85:29:d6:66:a7:b0:a8:0e:c7:1a:1e:11:05:9b:37:
4e:85:f5:58:6c:e2:95:53:36:af:aa:88:bb:0a:f2:
de:6b:ea:d2:be:98:6a:55:72:02:a5:51:28:80:5c:
28:da:a9:f5:ea:15:63:b1:1c:04:5e:ca:63:f0:45:
62:fb:c0:fd:d0:1e:26:e9:d0:87:73:cf:35:d6:99:
84:2a:fd:a4:2e:45:a7:02:95:b6:f4:fe:b8:55:35:
61:a2:9e:c9:22:9b:e2:31:2d:b3:d7:17:a8:86:bf:
f5:9e:3d:b7:c1:85:7b:93:ae:dd:d1:65:73:6e:76:
ff:57:b6:82:81:29:e7:79:a0:fe:28:2b:b7:b6:94:
03:49:b3:2c:25:f3:dd:a7:43:72:5f:d6:5d:f0:24:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:BF:97:C2:FB:2F:6F:6A:7F:F1:1E:BE:B8:69:90:BC:0A:92:91
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8f:94:16:a3:3c:b2:ce:c4:a0:64:19:9c:43:6c:ce:ee:6f:
a8:81:99:fb:b9:32:00:91:0a:e1:7e:d0:20:39:20:fa:96:97:
3d:d0:74:8f:22:8a:70:a0:ea:83:c8:ce:4c:9b:7a:ec:87:ca:
84:f2:1e:fd:d7:7e:75:0c:51:2e:a1:45:df:bd:c3:58:aa:4f:
c2:c7:ae:bd:c5:f9:8a:ee:8a:3a:8a:5b:07:dc:78:bf:f3:8d:
5d:f8:53:3d:fd:34:9f:a4:6c:32:37:24:bd:7f:9a:a7:aa:02:
6e:0e:19:3f:ff:80:9f:14:f3:47:f5:64:73:05:7a:cf:d3:e8:
e0:71:87:6e:02:e6:f7:66:d8:8c:8c:56:77:9b:71:45:7d:72:
f8:da:7b:16:a4:f6:d6:d6:98:27:a9:e6:3e:7a:6a:16:b0:c8:
b5:a5:91:ab:2b:0b:80:8f:f6:75:54:95:0d:19:71:2c:4f:f5:
a5:39:eb:5c:30:f1:57:3b:e9:02:b8:6a:98:83:d6:05:41:8f:
e8:72:d6:96:ed:f1:df:5e:5b:20:42:5f:60:84:f0:80:2f:a1:
c4:1b:83:00:72:5a:eb:d0:2b:ac:15:5a:07:58:89:79:b3:ac:
d5:7b:d8:bb:39:76:92:eb:7d:60:08:b0:a6:8e:21:24:65:0a:
91:95:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:10 2025 by rpki-client