Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: W5ajXaMpz4HeUsw2Keiy8YDNjr4i07GSWFZOLMeUbOI=
Subject key identifier: 59:A0:1A:34:1B:DB:C8:02:46:AD:AD:35:0D:AD:3A:5A:34:31:D8:59
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01975A24B019739B9F76A0FC74A61964519D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1590
Signing time: Tue 10 Jun 2025 14:00:43 +0000
Manifest this update: Tue 10 Jun 2025 14:00:43 +0000
Manifest next update: Wed 11 Jun 2025 14:00:43 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: S4yJLhJ18o50usu1UEijTVYsUEKj19SwxIW/bmjaNpM=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:b0:19:73:9b:9f:76:a0:fc:74:a6:19:64:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 10 14:00:43 2025 GMT
Not After : Jun 11 14:00:43 2025 GMT
Subject: CN=59a01a341bdbc80246adad350dad3a5a3431d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:80:11:d6:8a:88:e8:80:dd:fb:fb:b7:e7:
bf:cf:0b:ef:be:66:16:d4:af:eb:25:1f:65:75:93:
2a:a1:24:3c:42:05:52:75:a7:28:dd:0a:9e:b1:70:
e6:a8:28:fd:5f:14:fb:79:2b:45:bf:ec:75:7c:9c:
26:a7:cc:d3:7c:3d:8d:0b:bb:b0:d5:8d:9d:fc:d3:
2e:48:ab:ae:cd:87:2e:4d:c5:7b:82:36:75:23:06:
f0:94:27:1a:8d:76:29:73:b7:68:6b:0c:2e:48:a6:
9d:46:2d:58:73:6e:c7:da:3b:8e:e4:b5:aa:d2:42:
3d:5d:0e:f5:db:2f:58:80:a7:5d:19:7a:24:d9:30:
40:58:c4:4b:33:bf:a1:61:40:34:15:d4:a3:7e:af:
6e:1b:98:90:52:b9:41:39:cb:3c:6c:83:09:ed:79:
70:81:39:69:71:7b:12:c9:58:20:9c:83:dd:fb:48:
91:96:7e:56:c3:99:42:f4:ac:06:e4:8a:20:96:e1:
42:e8:ea:c4:6e:3d:ba:1b:0e:78:1c:6a:e1:66:11:
c9:4a:f3:29:e5:83:77:b4:e0:0b:2a:18:a7:ad:ad:
ba:7a:74:ef:42:da:52:59:a2:a9:07:50:f2:1e:51:
39:83:9e:93:f6:fb:c4:4b:c0:3b:43:84:92:64:fa:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:1A:34:1B:DB:C8:02:46:AD:AD:35:0D:AD:3A:5A:34:31:D8:59
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:14:01:15:6a:74:c4:5d:89:44:7b:76:2c:6d:9e:69:1c:
29:1c:d8:08:25:f1:16:4c:78:0e:60:09:f8:b9:29:18:93:13:
52:1b:0f:0e:9e:6b:3b:22:f5:50:dc:dd:6b:5a:a8:e4:08:23:
ba:a2:63:d5:b9:6c:55:9a:94:de:1b:af:db:60:92:c1:94:31:
7f:a1:75:89:d1:8e:b9:56:45:b2:82:90:69:70:c7:67:fd:60:
f5:34:66:c5:19:fc:11:dc:e0:38:8d:2d:8e:bf:50:30:7b:9e:
09:2d:d4:44:aa:95:ab:14:d6:74:9c:4a:ae:f3:2e:81:b3:ba:
19:f5:2c:f1:b9:ff:02:ec:38:a8:6c:d4:b9:a9:47:8a:bf:17:
09:82:fb:b2:4d:7b:e3:1a:01:3e:5b:d4:87:b8:ba:41:12:85:
24:5a:c5:12:1b:24:4f:dd:a1:77:04:69:35:be:cf:2d:f6:68:
4a:d9:88:8f:ef:e3:b9:65:ee:03:81:18:97:0b:f5:2b:da:cd:
04:a0:8b:29:97:2f:ef:91:08:85:75:55:19:31:0c:8e:27:c8:
c3:2e:d9:e7:05:40:3f:75:01:5e:e8:95:ea:1b:47:4a:fa:9a:
87:c5:32:20:79:d2:15:6b:36:af:41:fa:5e:97:9a:9b:14:9f:
0e:b3:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:48:11 2025 by rpki-client