Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: /B3uGZ+tH/tjenGBl1oUMgtBrsFPMtNkxDwxLeOvo4U=
Subject key identifier: 31:D3:E7:35:F3:0A:B6:59:F5:88:40:37:55:6D:FA:B6:60:7F:4D:39
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 0197C94B9E95C5E0C5475B6AF3649135E27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 39
Signing time: Wed 02 Jul 2025 04:01:05 +0000
Manifest this update: Wed 02 Jul 2025 04:01:05 +0000
Manifest next update: Thu 03 Jul 2025 04:01:05 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: nKPof0RgWAPXeWY7wc7UHz7kmKGSqtDoS08JC7Ra2p8=)
2: acXUcm42IS4pl31BFqGLL598V-g.roa (hash: tv2sOndhlPwn5kgKUF5qX+dekYD4mLLwcOPc7PK40dI=)
3: n3osC5rKdM6iHPZx6MqCr3JTQWc.roa (hash: suRQqEpXKgoazuJMwgkEGufz4KYSCm9sjlRmUwQJnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:9e:95:c5:e0:c5:47:5b:6a:f3:64:91:35:e2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Jul 2 04:01:05 2025 GMT
Not After : Jul 3 04:01:05 2025 GMT
Subject: CN=31d3e735f30ab659f5884037556dfab6607f4d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:9b:8b:05:73:f4:b5:e8:bb:e8:b8:8e:ba:
49:d2:d3:7d:4d:26:f0:7b:e3:84:52:e1:00:c9:a2:
a4:78:5d:46:c5:ad:16:aa:7b:9c:6d:ed:37:4d:b4:
f5:37:a1:36:ca:03:08:ea:eb:7d:e2:51:ad:85:0f:
34:15:59:5f:b7:8f:62:1d:89:ca:97:cd:0d:11:d7:
93:4a:80:3a:b8:0e:17:dd:cc:1a:9e:93:26:60:44:
b5:8f:e9:67:5d:12:48:cf:42:3d:78:f4:e8:2b:57:
ee:00:37:82:22:46:c2:df:83:05:c6:07:a0:ae:2a:
8f:6f:1a:46:e8:b4:9e:de:ae:73:29:4a:15:f0:1b:
4e:55:69:44:4f:98:98:fd:b4:12:1a:39:03:1c:1f:
0b:23:ec:d7:53:b1:43:e7:f1:21:a6:2f:31:c6:d5:
e6:22:6b:2e:f8:22:c5:19:43:6d:ed:4b:03:86:b5:
86:37:59:23:b9:70:49:fd:5e:fa:9f:9b:4d:8d:a0:
e4:eb:70:72:4b:92:38:1f:02:dd:db:37:67:98:49:
0d:87:3f:e9:a9:03:a1:8b:5f:5c:48:de:62:84:40:
fe:84:c2:e2:d9:22:b1:12:60:e1:a0:7c:6c:eb:cc:
b2:9f:a7:30:f4:7b:a6:0f:ce:e4:b8:38:df:8b:49:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:E7:35:F3:0A:B6:59:F5:88:40:37:55:6D:FA:B6:60:7F:4D:39
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e7:36:70:52:82:d4:d6:d6:98:21:2c:9c:c0:a6:d1:0b:62:
e5:f0:05:c8:14:4f:ef:75:23:3a:fd:af:dc:6f:e9:bc:ac:d6:
f7:34:11:13:ba:3f:e0:f6:ed:47:7e:62:b8:94:43:26:0d:08:
d7:d7:bb:c8:0d:e1:d4:e9:3f:59:81:0a:bc:30:42:d5:d4:41:
e0:c7:47:d4:cd:46:c7:17:da:1a:ad:6b:53:d9:1a:3d:b9:f6:
d8:61:29:84:8a:2d:5a:6e:e6:d6:2a:b0:b5:5f:60:6a:67:da:
7e:c1:03:c4:54:18:02:2b:0d:d5:b9:13:f1:2b:98:f5:d1:a0:
84:03:49:0d:d1:be:a5:19:8d:42:3d:ac:50:cc:23:8b:81:86:
b8:c4:66:20:4c:0b:0a:16:21:43:77:7a:61:55:10:72:cc:9a:
60:4c:d1:01:bb:4a:b6:be:3b:ed:40:0e:fa:d3:db:2e:3c:88:
bd:6c:63:62:75:31:44:be:81:04:fa:f5:3d:a1:b2:7a:34:9e:
c1:b9:61:3b:96:33:ad:96:93:18:07:b7:14:36:5e:27:cb:c4:
fe:10:d3:54:2c:e8:61:52:e1:be:58:e3:47:9f:91:59:77:19:
5e:dd:63:1b:1b:29:0d:69:a4:94:22:69:11:e4:b3:25:10:e7:
e3:de:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:50:37 2025 by rpki-client