Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: BezTAbrEueIAhbDJaSOpzXV3uYtNLqr22FmwvFkhFT0=
Subject key identifier: 34:87:A0:D1:22:EB:E2:EB:FB:46:27:62:81:F9:86:06:58:D7:00:DE
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 019853E8C728F13EED702BB7D7FE7E563F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: CA
Signing time: Tue 29 Jul 2025 02:00:20 +0000
Manifest this update: Tue 29 Jul 2025 02:00:20 +0000
Manifest next update: Wed 30 Jul 2025 02:00:20 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: z2GlpfcfUMdbCs5t4W+H0026oFxKKSOx0siULcj2U3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:c7:28:f1:3e:ed:70:2b:b7:d7:fe:7e:56:3f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Jul 29 02:00:20 2025 GMT
Not After : Jul 30 02:00:20 2025 GMT
Subject: CN=3487a0d122ebe2ebfb46276281f9860658d700de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:5b:79:18:eb:95:7c:62:c2:65:ec:a3:5d:
c8:89:4a:c2:7c:8a:00:6f:2e:59:4f:59:f6:40:3d:
27:dd:e1:1f:99:a2:3c:55:0a:60:4e:08:6b:be:8e:
0b:d3:bb:e1:ff:05:78:83:75:27:90:8f:74:e5:77:
99:df:1e:79:aa:b0:c4:48:5a:68:39:85:02:7d:c1:
28:7e:6f:50:6c:db:b1:46:56:77:17:b9:7d:18:fa:
8f:67:2c:ab:c5:a9:66:d5:55:38:ee:2f:08:2c:ef:
81:e0:0c:dd:f2:75:0b:ab:a5:fe:dd:33:db:42:86:
5d:23:34:99:e8:16:c1:90:07:38:2f:a9:9a:71:12:
fc:ad:b6:5e:42:7e:b7:9a:49:d9:dd:97:6c:1f:f7:
29:51:6a:62:27:0e:08:07:39:1b:51:bb:c2:a8:8b:
b5:09:f3:96:7b:0e:88:b3:65:44:44:f8:db:de:1e:
53:df:99:62:b6:e1:e9:59:08:53:96:bd:81:f2:de:
30:6d:a1:87:fe:35:b0:6d:73:a5:66:1d:4b:f5:9d:
48:3a:02:4f:94:b6:1b:32:9f:1a:28:5a:75:d2:e7:
e3:fa:45:a9:b7:ba:73:13:ef:45:ee:ff:b7:64:31:
a6:cd:c0:de:a0:be:8b:59:96:6a:06:e5:9f:69:27:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:A0:D1:22:EB:E2:EB:FB:46:27:62:81:F9:86:06:58:D7:00:DE
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:ef:0c:90:fb:f2:89:ab:db:e3:49:9a:36:a4:6e:c4:26:
b3:de:84:ac:bb:8a:c1:da:d1:a5:74:b2:cb:40:19:df:a0:4a:
d2:59:f6:8b:95:33:2d:5e:3f:6b:4b:7a:a0:ff:f9:94:cc:b8:
86:8c:cc:87:a1:be:8b:a0:98:fb:a8:1e:b4:68:2b:d6:c8:1a:
4c:2a:62:c7:0c:9a:fa:ed:d2:fd:61:d5:d1:82:a3:04:4a:3e:
31:86:68:e6:5f:c9:a5:38:1f:de:77:1e:37:c7:05:82:53:4a:
9d:21:02:ad:ee:e2:06:e7:19:1d:ce:d7:ef:0d:5e:cb:0c:ea:
de:a8:99:b6:2b:ca:c1:e1:83:41:0b:30:75:48:68:fc:ed:a9:
d3:fa:56:21:dc:83:3f:e7:68:71:04:b7:b0:bf:e8:17:64:5d:
ad:89:75:d8:17:71:14:5c:b9:ee:5b:85:a8:66:5f:7d:56:cb:
4f:3a:6c:da:7c:97:56:06:99:b3:43:25:c8:7e:0a:4d:2f:94:
99:9c:06:c1:d6:3a:12:a0:1c:2e:4a:97:98:d5:0a:08:43:9d:
8e:21:9d:af:01:93:d8:72:24:df:f6:fd:1d:81:ec:7c:c6:e5:
eb:8d:35:8d:23:38:36:b7:cc:7b:ef:6a:68:9a:b2:de:e1:fa:
78:b9:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:28 2025 by rpki-client