Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: ncW1e7HLt4Mby/S5mzIXdCIg+AHMY0nRj2O6/vqhF28=
Subject key identifier: 93:EA:09:CB:60:AD:7B:16:BB:95:A7:30:07:66:52:63:E6:D1:7D:03
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01974742B5B90493FD86BE266E50E2156E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1012
Signing time: Fri 06 Jun 2025 22:00:43 +0000
Manifest this update: Fri 06 Jun 2025 22:00:43 +0000
Manifest next update: Sat 07 Jun 2025 22:00:43 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: v7I7u2YvlR0iKceJY11uMB1kEUu2B7O15vKxhTRhGEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b5:b9:04:93:fd:86:be:26:6e:50:e2:15:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jun 6 22:00:43 2025 GMT
Not After : Jun 7 22:00:43 2025 GMT
Subject: CN=93ea09cb60ad7b16bb95a73007665263e6d17d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:ab:4d:de:43:f8:d5:df:84:a4:76:f0:76:
64:25:ae:a5:bd:8e:c6:a9:5b:12:97:8c:1c:1d:1e:
0d:eb:f7:5c:f7:4a:69:69:96:74:a8:ae:b6:67:11:
e9:ba:40:c7:12:33:f3:e5:ea:d2:64:48:e9:43:fc:
a2:f4:9f:75:73:51:87:99:e6:49:11:81:f5:0f:7c:
9e:d9:4e:7a:f8:6b:51:0c:b0:62:31:13:32:91:0c:
9f:33:9f:96:16:47:7c:fd:da:ba:26:de:7d:fb:09:
f0:c3:04:7c:db:ef:df:82:38:93:c3:e7:67:8d:ea:
ef:39:c3:b7:ed:cf:3e:01:aa:06:51:34:af:80:07:
c6:25:94:87:9d:41:c5:85:63:40:fe:8a:db:dd:05:
84:18:91:5d:9f:0e:35:3d:25:d2:6d:2e:8e:c3:ab:
bb:5e:6f:9b:95:4a:0d:f3:cf:77:35:c3:fd:73:91:
00:ac:83:0a:7e:7c:53:6e:bc:82:f8:c8:23:26:16:
53:0c:0c:8f:74:f8:b2:c9:5b:8a:1e:eb:b2:e1:89:
86:ba:ae:09:46:0b:6c:46:24:7f:12:de:4c:ce:75:
b6:78:0b:07:2e:9a:a4:1b:9b:6b:7d:03:b2:f0:40:
ac:86:7b:20:81:d5:98:56:bc:ff:b4:65:b2:d7:25:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:09:CB:60:AD:7B:16:BB:95:A7:30:07:66:52:63:E6:D1:7D:03
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6a:43:83:60:b9:fa:6b:f4:28:02:fd:49:80:ee:bc:15:11:
78:97:ae:21:53:21:e5:0a:21:c2:54:da:bb:13:23:ed:fd:e2:
06:e5:01:c1:56:03:58:cb:e2:e6:0f:8d:68:53:3b:8d:7d:41:
08:71:90:98:15:9f:24:84:3b:cb:ed:85:31:83:96:5f:ab:d8:
c5:b5:d7:2b:f8:41:54:64:f9:10:0a:96:8a:b2:44:93:a3:03:
a8:32:98:bf:e9:2e:6d:5c:e7:d3:bc:74:cd:6c:55:73:71:01:
45:09:95:a5:f5:e1:64:53:27:ba:55:a0:48:36:75:d2:14:29:
b3:e9:20:13:51:5b:6f:0f:fa:28:52:c9:df:e9:09:5d:d6:1d:
e7:89:27:72:40:b3:af:5f:02:18:ef:f7:10:e0:43:4d:cb:88:
35:16:5e:ce:5b:0e:ff:f0:8a:8d:71:ce:f5:b3:f1:df:05:b5:
5b:52:f2:29:ac:fa:43:d6:6e:da:e0:0d:00:8c:aa:75:8d:07:
3d:e2:b8:58:79:96:91:c4:77:3b:53:29:37:9f:2b:db:86:8c:
b1:c9:26:cc:04:ea:ca:78:a6:6b:41:9e:86:21:24:49:d7:42:
15:a0:d5:de:2a:60:13:e6:2f:75:c1:e6:11:6e:17:53:b7:03:
80:a8:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:36 2025 by rpki-client