Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: 1ifhMY48rNX4oHc5l38e9kf13wRzXWnpm66etPyLa7Y=
Subject key identifier: 45:D2:86:51:4F:CD:44:38:90:90:21:6B:F0:12:40:97:A1:51:77:44
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0197575AAB23847754D53E20AE68830ED4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 0653
Signing time: Tue 10 Jun 2025 01:00:49 +0000
Manifest this update: Tue 10 Jun 2025 01:00:49 +0000
Manifest next update: Wed 11 Jun 2025 01:00:49 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: BwLVX8knmuh4lNfQcM1NzCKXDnnaLDYS0maeX8I68hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:ab:23:84:77:54:d5:3e:20:ae:68:83:0e:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jun 10 01:00:49 2025 GMT
Not After : Jun 11 01:00:49 2025 GMT
Subject: CN=45d286514fcd44389090216bf0124097a1517744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:dd:31:85:ab:09:73:2f:7a:ed:2e:40:e6:
52:30:9e:0c:1f:e3:2d:2b:99:e6:be:fb:7f:8d:a3:
23:a7:f5:d9:c8:b0:2c:cf:71:29:55:e5:ee:47:1c:
3f:67:25:31:d7:d7:cb:02:2a:3a:d4:44:e1:70:95:
50:6a:32:57:b0:f8:4a:50:aa:1a:36:98:4d:aa:d7:
ab:ce:eb:1b:e7:a5:80:c3:20:db:41:77:79:b8:52:
26:6d:73:5d:77:58:65:9a:fd:b8:79:df:e0:c3:6b:
ad:bc:00:23:45:19:79:b4:19:d7:0d:30:f9:bd:e4:
12:7a:87:88:77:ff:1d:1e:64:7a:46:3a:8b:3c:bf:
b8:7f:d9:05:de:c8:93:f2:84:3a:d7:c2:76:66:a8:
4d:4e:50:8d:22:dd:04:87:3a:fd:5d:68:b3:1c:a8:
dd:81:67:46:8e:d1:5e:ea:46:b2:d0:89:b1:db:7b:
0b:cb:df:55:ea:39:d1:d5:c1:fc:1c:a9:c8:41:f9:
cf:c0:2b:14:51:84:aa:b7:5c:3a:d3:72:45:69:71:
e7:ab:24:75:34:f1:2e:bf:1d:68:aa:80:95:39:97:
48:14:ac:af:b5:6a:d8:24:8c:0e:24:e4:30:23:c5:
95:26:31:76:1b:88:72:1c:23:0e:b7:25:45:f6:c7:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:86:51:4F:CD:44:38:90:90:21:6B:F0:12:40:97:A1:51:77:44
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:93:63:9a:a0:68:ba:d1:65:c7:13:75:fe:0c:7b:2b:54:
79:be:47:ef:b9:23:ca:f4:e2:85:c5:68:b8:79:60:d5:b7:05:
5f:7a:7b:23:ed:61:fb:c2:03:4f:2c:75:32:54:b3:52:eb:24:
ee:7d:a6:7e:83:b7:f0:c3:25:22:31:59:4c:9e:b8:90:25:52:
ad:2e:81:eb:34:14:06:e2:6f:58:ed:8f:04:13:e1:be:00:9e:
b0:df:83:2a:89:fe:8a:fa:96:25:fb:1f:b9:d6:53:b5:f7:d5:
de:ab:0d:53:da:37:92:a1:e7:0f:f8:1b:f3:7c:a7:fb:f6:00:
c7:c9:5e:df:b4:6e:f0:30:fd:61:f6:2e:bd:14:bc:8a:c3:e1:
d9:15:38:5a:8b:77:da:70:2f:27:55:fc:d3:39:8c:92:75:1e:
13:b1:5f:ba:61:36:33:2f:92:f4:72:b5:d6:a9:9d:be:cb:6a:
7d:18:76:5b:ea:2a:7c:a3:a3:7d:92:0c:5e:a3:3e:83:86:12:
68:45:83:e2:75:ba:ea:18:a7:95:02:48:0a:c6:49:bb:72:60:
f8:68:7d:90:3c:ec:7f:4e:4b:21:de:3f:d7:79:c5:0c:6b:7b:
f2:9c:d8:76:8d:9d:78:54:d8:09:fd:38:c6:09:e5:d8:ce:6f:
b8:56:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:31:47 2025 by rpki-client