Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: hd5WnEYVrGCEnCTiSrS2TUH+xPza38zYqvcLk1DGC1Y=
Subject key identifier: FF:40:47:15:FA:AC:B5:79:39:DD:62:20:02:23:9C:47:91:90:70:6E
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 01975CB81A58F0574B5562F99145DB01DD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 04CE
Signing time: Wed 11 Jun 2025 02:00:58 +0000
Manifest this update: Wed 11 Jun 2025 02:00:58 +0000
Manifest next update: Thu 12 Jun 2025 02:00:58 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: Kmw8gASS49LG62ppRrvkrI6AYIeV2GncEmfP5arFvFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:1a:58:f0:57:4b:55:62:f9:91:45:db:01:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Jun 11 02:00:58 2025 GMT
Not After : Jun 12 02:00:58 2025 GMT
Subject: CN=ff404715faacb57939dd622002239c479190706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:c5:26:5d:1a:84:45:00:c5:32:23:44:bd:
3d:04:13:5a:c4:3d:07:99:72:ed:8e:a1:0d:3e:ee:
da:c9:5e:f9:37:f2:a6:d2:6a:d5:d6:82:db:7d:49:
2b:e9:8e:72:53:a9:4d:a5:fd:18:bb:d1:42:6b:a7:
d0:65:e5:38:9c:11:56:bf:ad:85:35:3c:41:d2:92:
6a:f1:e8:e4:83:43:60:e5:14:ec:20:d5:f4:fb:4b:
a6:8a:ff:6e:0a:83:e2:d3:1a:34:54:53:b5:d7:60:
05:3a:c5:3d:7e:18:6d:d4:ab:d6:fe:de:74:07:b4:
2b:7e:60:4c:cb:d1:fb:49:ea:5a:f3:91:b3:4a:31:
c4:25:52:2b:10:0e:11:ca:8b:7a:e2:da:aa:f5:5f:
b0:07:b2:af:f6:cd:cb:61:93:61:7f:37:57:91:b6:
18:2a:5f:b7:e0:d9:d5:51:f6:74:d1:d9:aa:d2:f7:
d4:15:03:e0:2a:56:7a:c0:d2:9c:c1:4e:66:76:c3:
69:44:d9:88:22:e1:ca:cc:e4:57:1a:47:6f:60:26:
d7:4d:5e:d7:d3:b0:36:ed:86:06:e5:c1:5b:d2:3f:
25:98:c1:da:0c:98:e7:fa:5d:8a:b5:a5:57:62:ca:
07:60:e0:2b:25:42:42:6e:0b:0b:90:ab:b5:45:be:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:47:15:FA:AC:B5:79:39:DD:62:20:02:23:9C:47:91:90:70:6E
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:10:f2:37:f1:2e:b9:41:d8:4e:7d:6c:89:90:42:b3:d1:
27:21:d2:e6:2d:e4:44:bd:ee:9e:4c:06:f6:72:19:cd:b2:c4:
61:a8:e1:20:dd:aa:7b:ca:2c:c9:84:2e:e3:e1:f0:05:90:1d:
42:92:33:81:ee:43:e5:0c:b9:fe:3c:6f:4e:ee:7e:2c:e0:7d:
7b:4d:1a:16:39:5b:20:6f:64:69:95:d6:50:ff:09:5d:d0:3b:
18:68:9f:b0:82:ab:9b:be:3b:8e:5c:47:b3:55:cb:29:51:11:
e0:b2:8e:11:6e:52:8b:8e:72:8d:ee:89:23:2d:3d:2a:8d:eb:
9f:5a:7c:2a:6f:58:7b:ff:57:38:89:2c:57:5f:f4:95:fe:67:
7b:17:90:60:f3:67:cf:5d:69:e3:62:07:29:44:89:51:82:90:
eb:8f:1c:68:54:a4:87:ee:01:b0:f0:8c:56:5b:29:47:34:5e:
e6:8e:e7:fb:db:34:d0:d4:cd:38:07:c5:bc:e4:6b:28:a5:15:
81:51:9d:0a:e9:9b:1a:0c:53:50:03:a3:df:13:95:7b:a8:2b:
77:3b:90:74:16:2d:5a:fc:5a:c0:96:48:82:39:ed:61:e9:78:
66:1d:fd:3d:87:e1:4b:11:9d:75:72:e0:20:bc:da:fe:28:e7:
c5:63:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:06:17 2025 by rpki-client