Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: 4m1S5vZSRtTHAxEkInoa7cuk8qOHau3fM0a0r3L1gWI=
Subject key identifier: 89:FF:49:99:7C:31:34:F4:7A:28:6E:EB:1F:AD:14:95:A0:73:CF:89
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 0197CD5F684233B1468996244D5C2D10F30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 39
Signing time: Wed 02 Jul 2025 23:01:11 +0000
Manifest this update: Wed 02 Jul 2025 23:01:11 +0000
Manifest next update: Thu 03 Jul 2025 23:01:11 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: CtXYR7y9LQ7BtFkF0CTnxpo3j7b+NeT7sdR2JerdVkk=)
2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:68:42:33:b1:46:89:96:24:4d:5c:2d:10:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Jul 2 23:01:11 2025 GMT
Not After : Jul 3 23:01:11 2025 GMT
Subject: CN=89ff49997c3134f47a286eeb1fad1495a073cf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:a8:0b:ce:64:f7:29:08:9d:a9:1b:7b:fb:
54:f7:b8:c4:ee:bf:58:c3:95:60:c9:6a:cc:9c:47:
00:83:6e:12:48:36:0c:81:d0:29:28:da:b4:97:3a:
92:2d:12:da:70:a4:ea:9d:79:d1:5c:1d:e6:21:a4:
33:b1:88:ef:03:09:32:d7:e8:ee:0d:b6:b2:88:1b:
bd:14:98:15:ff:45:64:d7:a6:57:27:26:50:16:af:
1a:09:36:ba:b9:af:be:81:58:db:89:37:19:2f:c5:
de:70:2d:ca:aa:ac:5e:e4:85:fe:bd:03:b5:7c:8e:
a9:f9:ca:8c:05:08:83:08:20:82:63:ee:97:f6:c3:
5e:15:56:87:5e:fd:bc:39:72:80:32:d6:06:94:22:
2a:46:6b:f7:4d:d3:76:0f:26:94:48:07:6b:78:eb:
60:bb:e6:99:93:04:60:d8:fa:d9:48:4b:61:6a:d4:
95:0c:17:aa:f8:67:a8:ff:82:a2:c0:21:6d:5b:f9:
9e:10:9f:a7:41:07:28:9f:10:cf:d8:16:0c:03:a7:
40:5a:9a:f4:47:43:cc:7d:dd:24:75:cd:1c:6c:89:
a1:58:79:f6:01:24:e0:b8:7a:c8:36:e4:c9:34:17:
d3:d1:96:b1:bd:fa:bc:64:08:4f:70:0e:0a:21:cb:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:49:99:7C:31:34:F4:7A:28:6E:EB:1F:AD:14:95:A0:73:CF:89
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:8e:f9:83:6d:c7:6e:7e:9b:d7:a5:8f:76:3b:a1:f3:85:
09:91:3c:0c:f6:45:b7:bb:c5:92:57:ad:d2:ee:f9:17:2b:0b:
49:ae:a9:28:af:ab:23:ec:7a:0f:cb:07:a3:e7:41:ab:33:ac:
33:28:ca:58:01:48:e5:63:4c:b6:41:ec:5a:5c:d8:28:b2:de:
1d:77:12:33:ee:f8:cd:fe:cf:72:ed:5e:be:57:13:b1:83:96:
1d:73:06:33:ff:f8:cb:38:b8:0e:a5:59:90:7f:2f:4c:38:da:
95:f2:8f:86:f3:8f:0a:2c:10:fd:dc:1f:89:1a:53:98:81:d7:
a8:cb:7a:82:6b:37:dc:ed:a1:46:44:c9:30:b1:96:4d:c8:92:
66:9b:22:59:d0:8d:a1:13:f4:6b:b8:5c:a4:b6:a8:50:fa:8f:
1c:32:a5:f0:64:dd:2c:04:48:15:9f:ce:93:cf:10:e5:ec:ce:
38:68:e1:29:57:66:1e:6a:73:ab:c6:d4:04:d4:fb:62:0f:25:
ce:77:e2:cb:22:2b:af:79:8c:df:87:e5:22:9e:1c:a5:82:45:
5b:2c:83:6a:96:3a:ca:58:62:e5:b5:fc:b7:cc:ee:e0:40:3c:
c4:da:21:ad:a9:d0:ef:a7:31:0d:8a:0c:e9:20:d2:a2:6e:94:
00:11:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:07:34 2025 by rpki-client