Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.mft (raw, json)
Hash identifier: Euj606rODJiNhMUa/ICeHdln5WWo6IjtyI+sODY7Xvg=
Subject key identifier: B5:D4:E6:DB:95:C6:A5:C9:BD:0B:4F:10:F8:8D:88:1D:CB:72:4E:8D
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 019859EB97990939719973029F294B1EA386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 06:01:08 +0000
Manifest this update: Wed 30 Jul 2025 06:01:08 +0000
Manifest next update: Thu 31 Jul 2025 06:01:08 +0000
Files and hashes: 1: 36xiikxcxuVw9PQcTg1jlUkbTX8.crl (hash: HFvslm9zwJJ0WDOrRXDfiCHSNVIRwwznBiq/ifngRgk=)
2: 7JS41vM91mOZftvqn8jPBmhbJuk.roa (hash: aROAKgddtydWzjEbRgk4taCxbXsDkr5HWG29W6Kls8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:eb:97:99:09:39:71:99:73:02:9f:29:4b:1e:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Jul 30 06:01:08 2025 GMT
Not After : Jul 31 06:01:08 2025 GMT
Subject: CN=b5d4e6db95c6a5c9bd0b4f10f88d881dcb724e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:db:aa:e6:2b:6c:8f:49:9b:9d:db:18:e9:
94:00:c4:a1:a9:ea:53:52:7d:bd:00:98:dd:b0:25:
a9:56:80:27:ec:e8:98:59:00:a2:45:05:b2:23:bf:
a8:99:23:c3:e2:d7:3e:4e:c8:8b:d5:55:41:40:7e:
aa:fc:d5:4b:e6:ea:f7:5b:92:cd:dd:b6:ed:69:51:
03:c9:26:e7:f9:e0:f7:9a:c4:41:be:6d:9b:1a:08:
51:f8:97:ea:5c:d3:cc:df:d8:0a:0d:ad:92:ed:31:
a2:59:bc:7c:0f:2b:9f:32:39:2e:64:dd:18:30:ab:
fe:bb:6a:79:d0:c0:71:3c:b6:92:42:22:cd:eb:6d:
d1:83:77:95:97:88:14:79:79:18:d4:69:30:c1:d3:
5d:a8:bd:95:b8:f5:a9:5c:d6:16:db:85:66:f1:11:
90:92:ff:b0:7d:53:38:10:5d:06:2e:9c:e2:cc:d4:
56:14:c0:3a:df:56:b4:e0:c3:10:3a:90:d8:2d:b9:
16:cf:25:4a:c7:54:00:bb:84:fa:17:bb:b8:28:ff:
0c:c4:a1:0f:14:45:f3:85:bc:b2:aa:c8:e5:67:d8:
21:0f:6a:d5:98:2d:e1:93:9b:64:e2:f0:64:8a:cc:
3b:7c:24:e6:95:c5:14:c6:54:be:1c:ca:a0:66:c3:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D4:E6:DB:95:C6:A5:C9:BD:0B:4F:10:F8:8D:88:1D:CB:72:4E:8D
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ed:95:cb:d2:9a:e6:f7:ae:04:88:a5:71:66:c5:37:85:ca:
b2:0e:b7:24:36:93:6f:64:61:9d:04:70:2e:13:a8:59:ec:f5:
8d:cc:d6:16:4e:99:c9:d3:2c:f5:90:de:b5:ec:b3:31:d1:95:
d2:00:c5:ef:bd:6d:95:44:d2:8c:f5:4f:f9:6b:74:22:3a:fd:
01:ba:2a:fb:0d:64:ec:74:43:87:bb:58:44:d0:95:4e:18:57:
64:82:6f:f7:8a:e8:e8:1d:d9:c7:ee:69:57:a2:5a:51:be:0c:
57:64:31:6f:f3:f5:81:e3:dc:8d:e2:d0:78:98:a9:77:c1:a5:
8e:3e:b0:22:ec:bc:b3:d7:03:0e:69:5a:93:0f:69:b6:d4:bf:
51:4f:f2:a1:a5:68:e1:39:e9:49:6d:55:0c:49:eb:bd:c1:fe:
e3:d6:fe:e0:52:c0:b3:d5:bf:75:e4:06:0d:2c:46:bf:29:4c:
36:0e:58:1c:65:6c:dc:2b:59:be:cc:39:eb:75:0f:ed:a3:3d:
3c:43:f3:ae:f3:f8:41:27:65:68:fe:52:9a:ae:52:d7:0f:61:
28:0c:ca:75:2c:c9:66:dd:56:ff:06:12:f6:7e:7f:41:77:01:
02:de:af:aa:41:81:11:9f:16:4f:9c:d6:9f:4f:b0:9f:57:8b:
9e:2e:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 12:13:55 2025 by rpki-client