Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: EmY78iEwLo1Z+BUlJg1OSUW7GilSZ1jfi7VWr/OomHw=
Subject key identifier: F6:99:AC:F3:76:B2:53:9D:9C:C7:DA:1A:0E:32:0B:C9:A1:33:D2:03
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 0197470C444084091C8A9E2E7062C5C0C931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0304
Signing time: Fri 06 Jun 2025 21:01:15 +0000
Manifest this update: Fri 06 Jun 2025 21:01:15 +0000
Manifest next update: Sat 07 Jun 2025 21:01:15 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: UX0cbgawfc7Sx5vBtkzLsAeh4R35TEeOCc8MR4NADBI=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:44:40:84:09:1c:8a:9e:2e:70:62:c5:c0:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jun 6 21:01:15 2025 GMT
Not After : Jun 7 21:01:15 2025 GMT
Subject: CN=f699acf376b2539d9cc7da1a0e320bc9a133d203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:6f:66:a9:73:af:8d:01:a5:1e:61:13:5a:
1b:de:ce:3d:fb:d4:c4:2b:f1:7f:0e:33:6b:8f:25:
86:17:1f:24:c1:e5:54:55:4b:83:8e:3f:be:dc:71:
84:c6:bf:c4:63:17:e6:2f:c4:ee:d6:1a:72:3a:87:
6e:d3:cd:27:ef:62:50:a9:d3:d1:7d:7e:cd:e7:07:
99:e7:4d:d4:f7:7d:72:7a:bb:bb:e2:28:7c:44:74:
14:10:29:a5:7d:98:95:3d:ae:55:0d:d6:11:d7:37:
5c:9a:78:74:5b:52:93:13:e0:39:10:e2:65:9a:22:
41:29:59:1e:bd:05:99:8e:4e:08:e3:a3:02:58:e8:
7c:9d:fe:f0:32:5f:a3:57:e6:a1:72:db:e8:e0:db:
d0:bd:99:98:d0:72:da:6d:3e:27:ef:ac:4c:d0:7c:
7e:8f:c3:20:d3:18:86:cb:cb:0f:22:1d:aa:9c:59:
cd:7b:fd:ec:07:d7:66:67:f9:ad:b7:7c:16:61:98:
f7:53:19:25:4e:7d:84:5e:42:4c:3d:79:03:8b:d6:
40:17:e8:04:38:72:32:88:b4:58:47:31:ef:65:68:
a9:88:d4:d3:f2:35:da:47:60:e0:92:19:f1:b5:de:
6b:8f:ab:41:1d:a7:82:bc:6d:63:88:75:c0:2d:73:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:AC:F3:76:B2:53:9D:9C:C7:DA:1A:0E:32:0B:C9:A1:33:D2:03
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:06:e9:7a:73:6c:33:d1:bd:e6:06:04:fc:21:80:0d:1d:
c4:9a:21:ec:97:a8:0f:a1:d9:94:60:7f:d2:7e:d6:59:a2:53:
1b:a7:cf:dc:51:be:49:bd:05:99:7f:b4:c0:8f:da:e3:46:86:
a9:cc:e9:b9:ef:08:2f:f3:7e:05:d5:4e:61:86:43:02:0f:77:
60:36:51:a7:b9:db:b6:ce:7e:fd:3e:a7:b9:02:65:78:3c:89:
de:3f:21:62:b1:b0:8f:a4:5f:48:d2:ab:85:51:a9:e9:39:9c:
e7:a6:66:ef:bc:5d:89:55:92:8b:f3:b2:99:5d:69:3d:48:c5:
5a:b6:7e:70:fa:ef:b0:e7:77:0a:43:6c:9c:36:e2:73:a1:df:
3f:e6:27:0c:72:37:d6:5b:30:b3:9d:2e:c5:92:00:f8:39:a0:
ac:1a:6b:e6:f7:9e:99:27:3a:99:54:0d:d4:1b:8b:f5:8b:38:
fb:bb:89:a7:37:9a:89:a2:f9:9c:c3:8c:bd:ae:09:08:10:29:
40:65:f1:54:f3:ac:50:f1:8c:85:c8:83:28:e8:67:fa:ea:48:
29:73:e7:a5:2f:c3:26:7f:4c:15:ce:39:9e:87:09:3a:9c:55:
3d:12:46:81:34:0b:14:fc:07:23:0b:d8:46:da:0c:0a:1d:06:
5c:e9:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:25 2025 by rpki-client