Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: I+X7iWJQo0KLTysm8TQ/IXIlpBY+OXRQJURAqiPkwcw=
Subject key identifier: 0B:97:FA:EB:9F:9F:1E:34:2B:91:9B:B6:5D:8D:C1:C6:17:00:92:4F
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 01974742EEBCE80AA8B4B3A42C5663BFD093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 01CF
Signing time: Fri 06 Jun 2025 22:00:58 +0000
Manifest this update: Fri 06 Jun 2025 22:00:58 +0000
Manifest next update: Sat 07 Jun 2025 22:00:58 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: jpUjwYBRHbmUv3ViTYxxNovYNkihOx7aSV69uIw+yCA=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ee:bc:e8:0a:a8:b4:b3:a4:2c:56:63:bf:d0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Jun 6 22:00:58 2025 GMT
Not After : Jun 7 22:00:58 2025 GMT
Subject: CN=0b97faeb9f9f1e342b919bb65d8dc1c61700924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:63:48:f7:19:f1:e8:8d:f0:a5:3a:4b:89:
15:7d:54:d2:3e:17:40:54:5b:bd:d2:69:23:ca:cb:
ce:50:ec:8b:cc:cf:40:2b:15:0e:1d:93:76:e7:ac:
76:76:4d:f8:f2:fb:91:52:c9:6b:eb:b7:a2:2e:b2:
31:bb:70:13:ec:07:a4:89:2f:82:b0:d5:5a:f3:de:
6c:11:72:80:b6:d7:85:5a:f1:f8:75:e3:2f:42:98:
ad:d0:3d:50:35:11:ce:d6:e3:5f:06:2c:a8:fb:33:
04:fb:b6:94:29:63:b7:13:70:68:dd:5c:4e:f0:58:
59:77:39:08:4d:57:45:a9:54:49:83:85:73:e8:4d:
33:81:98:1f:3b:62:a3:cc:ba:65:bb:59:18:38:a9:
22:3f:10:ac:22:36:38:9e:2f:ed:c0:04:8c:90:24:
b3:fb:95:33:86:c0:7e:ff:61:16:39:2f:4b:65:e9:
21:f3:6f:bb:04:c4:e3:d1:ca:b3:4c:70:93:ce:b6:
35:91:b6:90:3d:45:40:6c:9c:ed:c4:ac:2a:43:66:
33:c3:71:ad:d1:ae:03:b7:f6:45:9f:05:93:c2:ed:
42:c9:39:17:f4:e9:62:1a:a7:05:6a:a4:db:99:0a:
a1:74:3f:31:94:cb:66:bf:03:5d:a0:b9:6f:eb:2f:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:97:FA:EB:9F:9F:1E:34:2B:91:9B:B6:5D:8D:C1:C6:17:00:92:4F
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e3:18:a1:32:68:fa:c8:e3:5b:ee:c1:d2:33:05:86:5a:20:
7c:c6:c0:98:2c:96:8c:e2:3e:cc:c8:c8:a1:75:74:cd:1f:e4:
b1:c0:a6:2c:38:fd:04:40:fa:a5:ee:dc:90:75:18:a6:ec:1c:
af:aa:92:6a:51:03:9f:3b:88:4c:31:fa:2a:8c:a0:4f:5e:ef:
d0:84:d1:46:a5:f8:2f:58:63:cc:d9:20:87:59:15:f5:8e:0c:
0d:04:79:f8:3a:ea:86:33:19:e0:6f:2f:ad:3f:59:f0:f7:a7:
96:7a:79:1b:d8:09:d7:8a:59:17:2f:3b:d1:20:03:6d:0c:24:
b0:d3:c2:65:c2:4e:1e:66:9b:ad:6c:d5:62:15:8e:dc:ff:86:
ec:7c:07:f1:29:65:a1:06:79:a4:a6:b6:ed:9b:b9:f2:43:9f:
d0:48:0c:68:d1:3c:d8:3a:28:79:38:44:27:30:ae:20:11:00:
de:7b:a4:08:7e:d7:b4:04:2e:54:8e:5e:fe:2f:f8:5c:ea:9d:
61:c2:71:a5:f3:16:36:d7:0d:53:89:8d:72:fb:a2:b8:2a:05:
71:b9:30:6b:9a:4b:a9:27:4a:fc:fa:e5:6b:eb:d2:bb:fc:82:
89:8e:8e:55:aa:90:6a:6a:63:e0:1b:1d:f4:1a:17:93:c9:8c:
ea:0f:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:17 2025 by rpki-client