Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: lqAPWA9F8ChjUrSRoa2jO1T+0xZQQ8en92QbZ6ySn+o=
Subject key identifier: EC:A8:04:3B:20:55:E4:DD:2C:21:18:7D:75:0D:C3:57:10:A2:B7:43
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 01985532BD63E6D2F694803B368001946E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0C9D
Signing time: Tue 29 Jul 2025 08:00:45 +0000
Manifest this update: Tue 29 Jul 2025 08:00:45 +0000
Manifest next update: Wed 30 Jul 2025 08:00:45 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 0n9YAOcvj4P/UicJEW7cXLUcKYp1oKzEJi4SPy1M904=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:bd:63:e6:d2:f6:94:80:3b:36:80:01:94:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jul 29 08:00:45 2025 GMT
Not After : Jul 30 08:00:45 2025 GMT
Subject: CN=eca8043b2055e4dd2c21187d750dc35710a2b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:eb:e3:f2:88:ee:02:52:6b:bd:09:2b:e6:
e6:4f:f4:41:3f:ae:06:1c:49:5a:c0:d8:a0:8d:b3:
09:a9:01:23:b8:e6:a3:f5:75:f3:d9:83:af:09:ee:
94:96:4c:97:89:f2:11:83:c7:ae:ba:42:b3:45:65:
60:84:c6:59:8a:cc:22:d2:90:a9:f7:81:5e:25:c4:
fd:0b:82:f2:4b:a4:70:a7:2f:bb:18:fc:42:7c:2c:
09:e0:81:88:92:e1:06:3e:b5:cd:7c:5b:a1:10:4b:
70:b0:7e:c4:ef:56:00:04:7f:4e:74:02:b6:f6:3a:
62:7d:88:d9:1b:59:df:00:fd:30:37:e9:91:58:ae:
07:dd:b9:65:d0:fa:b3:2e:9a:d9:0c:09:d7:66:f6:
10:4e:4d:32:83:6d:28:68:98:2f:14:f8:2e:3b:46:
a5:4f:87:60:75:ea:6d:87:95:02:01:d7:00:ff:2b:
ce:1d:57:0a:62:e8:5c:34:21:5d:34:78:77:6e:d6:
ef:3b:44:74:c1:02:5c:70:b8:18:cb:cf:5e:de:9b:
05:c5:51:25:a5:3b:1d:21:51:02:87:46:e5:48:69:
1b:fe:cf:81:a2:a7:ba:c7:19:af:48:f5:c3:f8:bb:
d2:90:93:d2:4b:a8:4a:2e:1e:a3:ba:04:56:56:03:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:04:3B:20:55:E4:DD:2C:21:18:7D:75:0D:C3:57:10:A2:B7:43
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:82:7a:b6:37:56:dc:98:57:4d:60:e2:52:e8:be:f2:3c:6a:
40:f7:14:56:61:71:22:2d:f3:46:99:90:12:3a:e4:b6:13:cf:
ba:cb:70:72:09:cb:f7:f2:ac:d5:b1:53:03:13:b7:25:16:f1:
13:dd:d4:eb:f5:11:8d:6e:6a:e3:4d:96:44:09:df:28:fc:7d:
3c:e1:73:18:d8:30:fe:d8:17:f6:f0:0e:eb:87:7d:18:3a:2b:
bc:f7:af:dd:36:2d:53:e6:76:16:ed:e8:5c:71:0f:63:b6:ac:
72:c9:7f:8b:be:1b:6e:7d:b2:bd:ad:8c:86:11:7e:fe:2c:be:
d1:db:61:bc:d3:0b:de:64:53:96:e6:98:d9:9c:33:3c:6d:48:
a6:c2:3f:89:2f:72:02:a0:78:c0:d5:0b:cc:71:e9:48:78:51:
10:ef:20:ae:e6:68:fd:fc:45:60:dd:05:87:6b:2f:8c:12:87:
d1:c2:31:b9:72:5a:73:50:39:38:15:3e:21:0d:15:63:d5:b6:
e2:a6:08:74:75:a3:4d:7d:6b:2a:94:50:54:63:15:88:40:9b:
21:a0:da:e6:47:b8:05:1d:f6:40:fd:5c:30:f3:fe:4e:33:b6:
b5:2e:29:05:d6:79:c7:26:df:67:ee:b0:6e:5d:31:43:24:21:
b6:fb:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:45:33 2025 by rpki-client