Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: 6vhWZv4AfU/Ao20weLo9LzMDp86PSzqVTyFHhWtJJaY=
Subject key identifier: 51:B6:2A:33:A6:C8:04:A1:8A:23:00:D1:F0:F9:41:C7:23:26:43:D7
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0197537E151CE875FDF3108423331A4374A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 0651
Signing time: Mon 09 Jun 2025 07:01:01 +0000
Manifest this update: Mon 09 Jun 2025 07:01:01 +0000
Manifest next update: Tue 10 Jun 2025 07:01:01 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: 3nBiHjsZ3iTcHJOuO5K62IRPN3f2gW62JOPu0v3+RpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7e:15:1c:e8:75:fd:f3:10:84:23:33:1a:43:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jun 9 07:01:01 2025 GMT
Not After : Jun 10 07:01:01 2025 GMT
Subject: CN=51b62a33a6c804a18a2300d1f0f941c7232643d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:36:2d:9c:08:64:6a:04:d1:0b:12:43:dc:
04:b7:a0:2b:8b:0b:9c:8b:f7:43:35:b9:e6:78:f3:
17:c6:cf:50:ef:78:8b:f2:e7:1d:a1:dc:d7:c4:e7:
12:fb:cb:ab:a6:a4:64:99:33:86:c9:a6:15:e2:46:
be:89:69:cc:55:77:ad:1c:3e:38:4e:a0:f7:fa:f4:
30:f9:b2:a7:18:f2:ba:b9:f6:dd:51:6d:dd:4f:71:
43:38:92:30:c9:89:14:ba:f0:26:d0:31:33:01:86:
a3:af:1f:4f:35:b9:98:af:ad:9e:ca:32:72:09:51:
a1:64:78:b0:19:0f:01:2b:d2:97:ff:9b:32:59:71:
35:48:08:71:ff:d7:7f:0b:33:08:97:db:cf:5e:4a:
49:ca:5c:0b:0f:5b:a0:c2:39:53:d5:55:3a:cc:65:
40:b7:ee:57:9d:7b:7e:d0:30:54:35:87:27:2d:b3:
be:c4:96:ad:26:e2:6a:ff:91:0b:a0:b1:55:98:98:
01:31:a3:b3:8e:62:51:bd:2a:fb:8c:cf:74:9c:a7:
cd:68:1a:d6:60:5a:06:9f:63:8b:80:5e:6d:c4:e7:
f3:a9:bb:39:87:82:b4:f4:be:3f:69:3c:66:99:dd:
5e:80:d5:2c:47:c2:b1:10:5e:eb:96:d1:e8:94:62:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:2A:33:A6:C8:04:A1:8A:23:00:D1:F0:F9:41:C7:23:26:43:D7
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:29:cd:d3:e0:09:ec:dc:bd:62:83:b6:ba:66:58:9a:e6:a6:
e9:cf:ba:9e:d4:9d:53:9b:36:13:b0:46:fa:13:95:49:5d:20:
05:b8:ae:fe:eb:57:2b:b3:89:cb:3d:dd:68:c3:03:26:a2:1d:
fb:d0:c7:49:75:b7:8b:23:62:0a:b4:b2:e7:f8:9e:c7:0d:34:
87:cb:e1:e9:43:67:d7:37:4a:64:01:a4:bd:32:20:d6:24:cc:
2c:da:0c:a6:32:04:33:2d:eb:a9:78:35:a4:ae:3e:ed:54:3d:
ff:23:e4:56:f7:72:ad:76:0c:14:66:a6:ff:c9:f4:e9:cd:2a:
02:71:b7:d7:38:d3:7d:d5:eb:18:04:76:fb:8b:3e:00:c3:16:
61:f9:aa:d4:4d:4b:92:28:32:84:a6:d4:b1:40:76:40:fc:52:
fb:3b:1c:33:d9:cf:38:09:9c:86:86:4b:52:7c:3e:aa:17:21:
89:bc:d4:c5:37:ba:34:63:ff:db:90:bf:ba:97:b3:a5:de:5f:
93:6b:ff:4b:f6:72:0d:54:ca:cd:42:aa:4a:05:9c:21:04:84:
9f:73:76:b7:f2:9e:fc:4a:3b:39:41:a1:31:0e:af:a2:b9:92:
27:4a:49:61:9d:79:18:7b:6d:da:61:56:1b:2e:a1:b0:66:01:
f1:1b:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:12:46 2025 by rpki-client