Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: /vStoaJVcbWCv2cKIwpLCtusbLozNhjqvWl+RddXKP0=
Subject key identifier: F3:9F:52:4C:4E:A1:E7:68:4C:52:59:5E:8C:1E:78:D8:7E:99:99:23
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 0199315A6DB4E013F457DFACEF9C2DB59396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0663
Signing time: Wed 10 Sep 2025 02:00:33 +0000
Manifest this update: Wed 10 Sep 2025 02:00:33 +0000
Manifest next update: Thu 11 Sep 2025 02:00:33 +0000
Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: +wk3uKwXsyjvdGLq60OxRqIGT1B1a5iNUnb45148iJ8=)
2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:6d:b4:e0:13:f4:57:df:ac:ef:9c:2d:b5:93:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Sep 10 02:00:33 2025 GMT
Not After : Sep 11 02:00:33 2025 GMT
Subject: CN=f39f524c4ea1e7684c52595e8c1e78d87e999923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:f6:95:94:44:c3:35:06:7e:fc:2d:d3:4c:
a9:97:eb:db:02:2c:fb:1d:a2:f5:d1:d5:71:55:84:
5b:a0:13:b1:71:40:0c:47:64:aa:90:d7:d4:1d:36:
83:f0:53:39:52:52:82:0e:e7:8e:87:e1:ba:c6:6c:
d9:2a:1d:c1:5c:32:f5:7c:f1:86:ac:e2:1e:5e:d6:
e5:70:25:6f:8a:4f:65:10:4b:b4:0c:0a:a9:c9:2f:
69:a6:4a:48:07:3b:42:67:98:40:06:ee:ab:a5:c3:
91:52:a2:70:3d:c3:c4:45:cc:c2:77:72:f3:88:f6:
29:8d:d2:b3:31:b2:21:e4:e8:10:21:24:dc:0a:77:
cb:4c:c7:d4:40:b2:87:f2:38:c3:56:1d:08:5f:81:
1b:82:06:9b:cc:f7:ec:87:8d:ec:86:90:96:89:68:
4c:9b:38:99:e3:d1:78:b8:bb:3c:1a:08:6c:4b:bd:
18:89:8e:76:a6:7e:6e:4d:46:2a:a9:bd:af:ba:42:
b4:33:f2:5c:b4:39:e1:3b:57:93:a1:a9:ba:5a:c1:
64:2b:66:12:89:ac:4b:7c:3e:87:c3:b0:ac:72:d3:
44:52:83:15:42:90:ac:17:94:09:ee:e9:5c:03:5c:
3a:f8:ec:ed:59:99:fd:46:cd:de:a9:80:a5:65:b8:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:52:4C:4E:A1:E7:68:4C:52:59:5E:8C:1E:78:D8:7E:99:99:23
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9e:76:6c:0f:d1:08:a5:a3:18:46:4e:78:87:37:04:fd:cf:
44:36:da:f3:b4:8d:b1:71:79:fd:54:5d:46:43:31:bc:3f:c0:
a5:1a:1e:ac:b2:4f:b9:62:c9:4f:d9:d9:42:ef:ee:17:05:fa:
f6:96:09:c4:64:da:3b:8f:f2:9d:70:08:3d:c4:f2:42:46:5f:
84:50:b0:86:a5:47:1e:f1:a3:49:b4:95:56:e8:b6:33:64:0d:
f7:2c:96:a0:35:5f:9a:d7:94:39:01:4d:b8:f9:37:aa:23:a6:
94:92:5b:18:05:d0:5a:5d:0d:a5:04:4e:a9:d6:0c:2e:51:e5:
fc:55:88:5f:86:89:e9:5f:1a:18:c7:ff:20:3e:32:34:6c:f2:
ee:9b:7f:4b:69:8f:9e:13:72:9e:3d:e8:27:03:ca:b7:44:98:
78:5f:29:0c:6e:f6:87:cf:a9:03:70:d6:a5:8d:1f:7b:93:3d:
e7:bd:79:29:bf:5b:64:60:41:6a:3a:11:69:7c:f7:7d:e0:06:
d4:f1:9b:8d:d6:cf:ba:a6:b1:83:00:0c:e9:55:b4:94:53:fe:
83:2a:82:56:6b:1b:4b:af:2b:2a:cf:19:ba:66:93:3e:10:a3:
6e:a5:ca:50:16:ce:99:62:e4:2b:cc:0a:d0:2a:9e:68:a6:a3:
0c:9e:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:51:37 2025 by rpki-client