Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: CG4YtcgAMBnIrCvjc37E1zoRcte4SUqyusRNqOwyi0A=
Subject key identifier: 12:75:9D:E0:B3:07:E4:E1:2F:8C:0F:EE:D8:04:EB:A7:08:4E:42:A1
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01975C1340637784867E83C809AD8B5005DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1591
Signing time: Tue 10 Jun 2025 23:00:54 +0000
Manifest this update: Tue 10 Jun 2025 23:00:54 +0000
Manifest next update: Wed 11 Jun 2025 23:00:54 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: E35Td2M+jku3wT+5/3XW6u2beuqnxFbXXTd23klqrEE=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:40:63:77:84:86:7e:83:c8:09:ad:8b:50:05:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 10 23:00:54 2025 GMT
Not After : Jun 11 23:00:54 2025 GMT
Subject: CN=12759de0b307e4e12f8c0feed804eba7084e42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:c4:4b:cf:02:15:64:06:1d:20:9b:4c:c1:
2a:1e:1c:cb:56:9b:cc:b4:fa:20:6a:6a:c6:03:66:
28:ed:64:3b:a9:2a:19:d9:f9:cd:48:d7:ee:36:df:
a6:d4:10:69:2a:e2:7a:c7:8c:89:2f:c9:f4:a8:16:
27:02:9d:9f:df:e0:4a:98:f1:39:93:e4:00:0d:20:
45:7e:97:ef:da:81:33:ed:af:3f:76:26:54:82:5c:
19:fa:3b:d1:78:b3:8d:8a:3b:11:54:e9:d3:9e:51:
cb:0c:65:5c:4e:b9:0b:5f:00:77:bf:9c:fd:ac:79:
69:e5:64:2e:fd:0f:78:5e:19:c1:48:64:e9:b6:80:
a3:7a:5f:b5:92:37:45:aa:b7:78:60:f2:df:62:2f:
b0:5f:24:3e:08:0c:7c:45:37:74:01:95:5a:af:55:
40:14:16:35:92:69:09:2b:e4:3d:37:90:69:63:6e:
71:d5:27:07:39:24:19:da:28:82:09:ed:d9:43:5b:
22:c4:89:2f:c1:36:b3:7c:8e:df:12:36:67:23:60:
72:92:c5:46:eb:92:45:7a:aa:67:8d:48:aa:25:6c:
d0:eb:e7:e2:1e:32:62:ca:0b:e6:8c:26:45:50:78:
0c:54:41:43:7a:85:64:94:ca:20:59:b4:4c:2a:c2:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:9D:E0:B3:07:E4:E1:2F:8C:0F:EE:D8:04:EB:A7:08:4E:42:A1
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:67:da:d4:8a:e9:76:20:92:bc:31:cc:b2:90:9b:29:44:
75:ed:cb:4f:df:e2:84:e7:84:54:fe:c0:5a:06:43:4a:fa:00:
8f:87:4d:e3:ef:23:56:41:9c:1a:13:a3:80:cc:c4:d3:46:38:
97:8b:d5:d1:a2:6c:95:9c:5a:c7:6c:3b:84:21:a6:86:92:58:
d7:da:9b:49:91:00:ce:d5:06:6e:3d:99:a2:26:c4:bf:83:19:
5e:58:5b:05:36:83:76:79:aa:14:23:8b:5e:65:22:75:ec:c2:
b0:ac:fe:12:5f:bb:ea:a7:16:4c:0b:bd:b2:a2:a5:18:b1:fe:
2c:64:96:09:a6:d6:3f:1f:c8:c5:b7:00:f7:e7:ab:cf:2c:ff:
85:3d:20:4d:1c:e4:05:2a:9b:79:17:82:62:02:fe:90:92:fd:
1b:d5:ee:20:83:3f:66:a9:cd:42:8d:a9:04:78:1d:14:89:f8:
e2:18:02:a9:63:33:81:06:68:53:17:18:7e:77:b6:c6:1c:85:
0f:0b:33:7d:d6:f7:e3:cb:77:c7:a1:a4:a9:d5:d5:26:bd:26:
67:c0:62:2f:4c:34:33:39:d3:85:1f:cc:64:21:2d:31:ab:ca:
70:d6:5d:fd:26:6e:8e:4d:d7:b1:55:5f:b2:dc:b5:47:00:e3:
a4:a2:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:09:12 2025 by rpki-client