Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: 8xNVs4bj11rSCYU7Pi1QWv0k9FEY3nDHckspbGFL21g=
Subject key identifier: 05:1B:00:41:17:13:68:9C:E0:31:B2:B9:47:60:FC:55:D5:6C:49:DC
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 01974A43B16E7A5FCD8F57463C4B49D26D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 0535
Signing time: Sat 07 Jun 2025 12:00:39 +0000
Manifest this update: Sat 07 Jun 2025 12:00:39 +0000
Manifest next update: Sun 08 Jun 2025 12:00:39 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: y91NhICAN2f5Z10QDDB5acl1e0j+AmTXcWIf2AbSxzg=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b1:6e:7a:5f:cd:8f:57:46:3c:4b:49:d2:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Jun 7 12:00:39 2025 GMT
Not After : Jun 8 12:00:39 2025 GMT
Subject: CN=051b00411713689ce031b2b94760fc55d56c49dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:1f:d1:ad:2d:64:72:dd:6e:b0:d0:01:b7:
5e:c8:a9:df:c5:09:8a:23:19:e1:1e:7a:a6:57:d5:
30:26:b8:22:d5:fc:6a:82:eb:6c:20:5c:0c:90:c4:
e8:b9:b6:b4:c2:d5:83:d6:7e:97:eb:0f:f8:42:a9:
c5:e4:1f:cd:c3:a9:42:45:f5:91:0d:52:97:7b:22:
9b:fe:38:b4:63:0f:ed:e2:4a:c7:94:9b:d1:67:d6:
d1:eb:4c:78:43:6c:8b:84:fa:a1:a0:b0:e8:dd:bc:
68:c9:41:e7:02:ed:8b:46:5a:8d:4f:8a:69:3b:1b:
0d:9f:23:15:61:8d:ac:9a:24:96:c8:8d:5a:7e:d7:
e5:d8:4d:57:c4:05:f6:98:64:55:73:72:c2:b2:e5:
b1:f6:38:3d:bc:13:7d:eb:83:9f:00:79:3e:eb:fb:
79:ce:4b:d7:96:65:3d:ab:c3:95:3b:fa:6f:ac:c7:
be:85:a1:e5:ba:7e:e9:f7:59:e1:61:d2:54:50:35:
ad:d3:f7:3d:68:5c:40:61:30:79:fc:08:f2:dc:be:
36:26:54:2f:ce:03:0b:e2:f1:c2:76:ca:7e:a8:18:
de:de:4e:16:92:7d:69:8d:df:28:ff:4f:ba:75:b1:
b7:ab:b8:4b:c8:de:cf:1f:c4:4d:77:22:9f:94:90:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:00:41:17:13:68:9C:E0:31:B2:B9:47:60:FC:55:D5:6C:49:DC
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:5d:d7:e7:1c:11:c8:98:5b:b3:14:b7:04:ad:bd:d6:e8:
80:df:3d:a9:78:38:05:38:bd:6d:f0:9a:5d:af:06:a9:eb:ef:
3a:9f:4b:0d:9d:79:00:52:77:1c:4c:5d:81:50:f3:75:f4:9a:
a3:43:21:f7:12:b7:71:7b:ba:ae:f8:c2:c0:77:cc:18:e6:06:
22:72:d0:a4:36:4a:c7:53:aa:3a:d2:82:43:e7:64:79:e6:cb:
53:4f:cf:c3:16:cc:a2:e5:de:91:8f:51:97:4f:e7:0e:84:36:
6b:f5:7f:d7:d3:de:d3:f5:a0:e1:5d:f5:55:c4:f8:19:c8:21:
b4:a1:89:61:0c:c5:29:fe:02:f2:0b:3f:35:b8:f7:8c:8f:9d:
f6:5d:9b:2a:ea:48:d6:a3:6f:54:b1:f5:77:43:44:00:a2:d1:
06:a0:36:da:90:ef:ee:8c:24:c9:21:d8:d0:03:97:37:2a:25:
1d:02:dc:36:a0:de:2a:a0:96:95:9f:22:6c:27:9e:d6:c1:78:
a9:33:74:38:fb:c5:38:1b:a5:b5:81:a8:42:3a:33:be:32:fa:
d8:1d:7c:09:6f:3f:fe:22:5e:ab:f2:48:74:fa:b6:45:06:00:
ea:2a:ce:49:9e:dc:71:bf:0c:d7:cf:d3:d9:f2:21:54:2c:fb:
28:4a:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:17 2025 by rpki-client