Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: AF348oDgIVFqowpjgce6DoDn6gk93gP5imt/79+94qs=
Subject key identifier: F6:80:33:60:EF:B0:74:06:65:09:23:A8:38:53:09:A5:89:F0:C7:E9
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01975FEFC520564AD9206582ADA36641F0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1593
Signing time: Wed 11 Jun 2025 17:00:38 +0000
Manifest this update: Wed 11 Jun 2025 17:00:38 +0000
Manifest next update: Thu 12 Jun 2025 17:00:38 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: Sy0lUfw+HcKHZ0zm3DYybIuAStWovoMBBsq2uElRZLM=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:c5:20:56:4a:d9:20:65:82:ad:a3:66:41:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 11 17:00:38 2025 GMT
Not After : Jun 12 17:00:38 2025 GMT
Subject: CN=f6803360efb07406650923a8385309a589f0c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:5f:38:f4:b7:20:48:a9:8a:73:21:a4:02:
f1:f6:5c:11:8e:f1:b7:c2:42:3f:be:93:66:73:f3:
b1:ca:2f:57:66:e3:bc:53:ec:55:76:22:dc:c9:7e:
79:37:b5:0c:8e:b5:c5:d6:20:90:85:63:24:b1:87:
13:92:2f:55:d3:95:a7:c7:7d:57:f9:53:9b:06:d6:
72:95:17:9c:e3:20:09:3c:50:e7:9e:c0:a2:6b:91:
fc:4b:8a:b8:91:51:64:08:98:be:c1:71:63:64:f8:
f2:cf:6c:c6:a4:b0:9e:3d:67:bc:ec:5d:dd:d3:41:
ec:ed:70:ee:75:22:da:86:89:88:35:a1:1a:60:21:
c2:28:25:a5:dc:7e:be:7f:b4:cc:07:05:c2:2a:e3:
95:59:ce:88:f5:2f:21:a6:d4:40:91:e5:74:b1:c4:
10:04:b5:cb:3f:cf:78:e9:9f:64:5d:6c:b6:32:00:
f6:f3:78:c1:e4:0e:6d:44:1a:19:2d:ed:8e:02:ec:
15:6b:0b:e8:21:98:d1:ba:1e:f7:02:16:c2:31:94:
f5:b6:46:1d:74:1d:b1:4b:6e:56:d0:c4:85:dc:48:
50:9b:ad:be:62:c3:95:f6:d9:b1:4a:47:19:f1:d7:
5e:17:85:da:e5:63:d1:66:64:d0:fe:1a:b2:9c:86:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:33:60:EF:B0:74:06:65:09:23:A8:38:53:09:A5:89:F0:C7:E9
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:80:ae:f8:7d:08:53:80:68:8f:a0:94:8a:47:5e:68:88:
14:de:59:b9:33:2b:e8:75:0d:e5:fd:80:75:85:ca:53:1a:5b:
04:63:44:7a:bf:79:0a:96:27:95:69:f2:51:db:27:0f:bc:01:
f6:15:92:be:4d:de:e2:91:b3:b7:50:7c:d6:67:44:d6:36:60:
05:73:16:59:91:c6:29:1e:ac:f3:c8:c4:a9:db:3d:52:bd:b7:
8d:55:d9:f8:a1:16:49:8b:14:09:ba:73:2e:7e:01:3b:a8:3f:
fa:cc:ce:1c:29:df:fe:ad:8d:e4:b0:0d:89:c2:1a:8c:09:7e:
5a:38:9a:13:40:d9:80:2f:e2:f0:53:fb:8d:ef:60:c7:8b:a0:
1f:1f:12:e0:db:66:99:2b:64:3f:c9:0f:e6:36:41:ed:6d:fb:
fe:56:4d:6f:4c:6b:6b:51:bd:0d:4b:6f:8f:df:c0:ae:c7:ea:
70:d3:50:ce:f8:b2:90:22:86:8e:5a:46:e6:90:c1:aa:00:e4:
d8:c4:14:a3:69:e9:b0:e5:2b:8e:a6:88:e4:01:19:be:b1:6a:
d8:b4:4c:bd:9b:9b:c2:ce:e6:02:a9:a6:0f:6d:69:da:2e:d8:
60:ae:0b:13:c4:40:d7:c0:59:f9:ba:c5:af:d5:0a:47:0d:d9:
13:63:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:09:59 2025 by rpki-client