Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: Oa0Kw2+Jm5ReSDLCs3AcIM2ksriH22hp3ou0/sSwXfI=
Subject key identifier: 29:BA:FD:36:2D:34:8A:48:71:92:1E:91:71:34:E2:55:B3:24:AE:F0
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01983E05D21BCE36A3333BC0E15BC1405731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 14D9
Signing time: Thu 24 Jul 2025 20:00:25 +0000
Manifest this update: Thu 24 Jul 2025 20:00:25 +0000
Manifest next update: Fri 25 Jul 2025 20:00:25 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: s1bkTc6mM5VgNdimYUYeJqS09U7QIe1/E+OG3Vz5tWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:d2:1b:ce:36:a3:33:3b:c0:e1:5b:c1:40:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jul 24 20:00:25 2025 GMT
Not After : Jul 25 20:00:25 2025 GMT
Subject: CN=29bafd362d348a4871921e917134e255b324aef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:24:2a:7b:6c:ff:83:f4:a3:b5:3b:6d:22:
c8:b5:42:d4:60:59:49:6d:de:15:43:11:36:8a:31:
c9:7c:b8:b2:0a:0a:08:ae:a3:6b:b2:c6:de:66:83:
53:e6:eb:b6:75:7c:20:61:12:06:88:03:f9:7f:1a:
b3:d0:84:2f:d9:6d:8a:0d:5a:ee:b2:1d:25:ed:1f:
d2:76:60:ba:6c:5d:fb:08:ab:5c:ee:f6:63:8c:bb:
72:51:a8:3e:aa:9f:74:cd:5f:9c:e9:4b:5e:cb:49:
29:08:e9:aa:76:05:5e:da:8f:a2:f8:f8:d1:93:57:
0a:a7:73:a9:fb:66:2c:5d:ef:2b:66:8d:b5:8b:e1:
61:05:c6:38:2c:ca:29:6d:4b:4b:77:22:de:e0:92:
8d:94:61:70:56:69:3a:ae:a5:63:a3:f6:50:89:eb:
eb:e6:80:61:86:79:06:99:e9:32:fe:e4:8f:f4:8c:
f5:ef:d5:b7:0a:52:4f:72:6b:81:f3:62:f1:34:21:
6e:36:b8:8a:e2:63:b1:2c:2e:4e:b9:4c:2e:e3:13:
fc:85:a1:89:36:63:d1:b7:7a:be:eb:65:e5:38:37:
09:5e:4b:fd:58:22:7d:29:50:76:fb:bc:2d:5e:4b:
e1:f2:16:83:f5:ab:7e:b5:c3:b4:15:73:8b:59:95:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:FD:36:2D:34:8A:48:71:92:1E:91:71:34:E2:55:B3:24:AE:F0
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d0:e6:26:9c:23:70:04:f7:a4:05:2e:59:b7:a5:6d:c2:4b:
4e:17:dc:f7:e1:88:6e:0d:3f:03:9b:7d:bb:2b:4f:37:e4:c6:
e1:59:df:2f:7d:21:c0:62:59:f3:24:9a:15:c4:4b:db:8e:a4:
b6:e3:1f:72:70:61:2b:7a:73:98:fe:87:c6:c7:a5:1f:b5:b5:
ae:37:d8:c6:d8:45:b0:6c:aa:05:35:dc:91:ed:ef:c2:26:8a:
39:c8:b1:da:54:62:f2:4a:88:f2:03:a6:f9:e7:d9:65:44:5f:
0f:3d:f6:04:11:16:5d:96:39:84:fa:56:2c:07:52:7e:36:e9:
cb:5b:48:3a:2b:0f:07:c9:75:b1:64:6e:27:35:f8:ac:be:fe:
80:3f:c4:41:94:2a:ea:3e:ae:a3:32:75:f8:e2:fb:1a:28:ec:
39:f6:6f:33:1e:1a:7f:e5:7f:7c:e9:67:bc:2c:4d:b6:3c:c1:
2c:fc:b7:c5:9d:ce:f6:44:79:c2:db:38:7b:68:92:00:ae:fb:
99:80:0b:f9:df:59:80:96:85:73:c9:00:f1:fe:41:7f:0a:28:
4d:27:00:03:a5:be:31:1e:46:0a:74:7b:c3:51:e5:ca:3d:9f:
7b:cd:8b:5c:41:5c:f8:c3:0f:37:81:34:62:d3:8c:12:9a:7f:
3c:83:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:04:25 2025 by rpki-client