Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: 9HGRV9nb8zxRgAldl9MY5vbq7XZ6LqHkv9B2lgTrOCg=
Subject key identifier: 75:23:CE:00:98:59:2A:1C:F3:6D:99:63:39:A0:3D:56:5A:CE:35:CB
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019761DDDEE5B40AD63FCC8DC9BDF67D98D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1594
Signing time: Thu 12 Jun 2025 02:00:19 +0000
Manifest this update: Thu 12 Jun 2025 02:00:19 +0000
Manifest next update: Fri 13 Jun 2025 02:00:19 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: fuzRbE5qFa8dxLeItjtGwRZ+tU2ecw+0IHQIPJveq1g=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:dd:de:e5:b4:0a:d6:3f:cc:8d:c9:bd:f6:7d:98:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 12 02:00:19 2025 GMT
Not After : Jun 13 02:00:19 2025 GMT
Subject: CN=7523ce0098592a1cf36d996339a03d565ace35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:61:e0:95:c3:33:61:90:e3:28:5a:b6:31:
29:20:5b:42:87:e5:2b:c2:6f:a3:55:2a:1d:c4:07:
fd:c4:8d:87:40:eb:de:53:49:4c:eb:00:65:e8:05:
ed:25:33:44:37:d0:54:7a:f3:15:84:49:68:31:7e:
0b:e9:23:05:09:2c:32:50:f4:ad:73:07:66:6f:b5:
b1:f2:b5:b2:39:b8:4e:5f:8f:d0:dc:9c:96:77:52:
a7:0f:64:1d:f7:f8:53:63:ba:56:0b:b6:26:64:45:
52:0d:ba:a3:81:aa:41:f6:21:fc:dd:09:c9:cd:65:
ef:2e:de:22:85:35:7d:93:bc:27:ec:b8:16:3d:b2:
50:78:a4:c3:5d:d7:14:e2:43:32:c8:ed:53:8a:15:
96:1e:ad:bc:d5:0e:37:25:98:7c:04:c0:4a:06:21:
7b:fb:2e:29:92:80:49:dd:8b:fd:81:04:bf:b8:a2:
c3:bd:fb:cf:71:38:bd:32:07:e6:2f:af:93:77:87:
9c:b1:2c:f2:cf:34:11:d5:96:a1:d8:43:e1:6c:cd:
1c:95:2e:9b:11:17:a0:73:2b:ba:4a:8f:72:30:55:
a4:e4:58:14:c0:1a:03:8b:92:dc:17:76:b9:4e:7c:
5a:dc:d2:f7:e1:e6:f5:01:da:d7:5a:36:bc:06:4a:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:CE:00:98:59:2A:1C:F3:6D:99:63:39:A0:3D:56:5A:CE:35:CB
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:c7:1e:f1:f5:87:ea:d9:d7:32:c9:57:96:63:19:73:28:
11:81:41:31:06:b8:34:21:b9:32:27:78:08:75:ef:da:6e:cb:
ee:f3:a1:09:bc:9f:1d:e8:73:ed:7a:04:87:9e:17:c3:ff:76:
01:4b:5d:55:1a:e8:3f:7c:5c:4c:04:57:af:ee:2b:53:69:e2:
45:61:6f:38:c7:ea:dd:f6:e6:ae:1c:2b:63:9d:9c:51:7b:22:
2f:22:98:28:74:e3:46:32:27:3d:8a:99:16:01:b1:36:fe:ab:
31:20:5d:4a:6a:c2:9f:58:07:ae:1c:a3:e6:85:fd:11:1c:24:
c0:e4:7a:58:11:8a:df:a8:41:53:da:95:45:25:48:f7:1c:44:
fb:0e:25:66:30:23:1e:6b:5e:33:fa:00:77:a7:72:1b:01:95:
a5:0e:2e:58:31:df:b1:a2:62:ef:28:98:a8:3c:3b:d7:ba:0b:
75:69:00:74:f8:0f:d3:53:61:4d:66:78:99:40:ae:6b:2b:79:
08:30:69:19:d1:1b:57:c4:d5:b6:3b:1c:d5:fc:5b:86:c9:22:
9d:ef:ce:02:70:1b:c3:1f:f2:46:fd:34:47:70:cc:df:5a:03:
e1:34:cd:70:d6:85:5f:15:3e:ad:98:cc:24:f7:3b:63:71:c9:
fb:df:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:37:26 2025 by rpki-client