Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: SEMYcMWrdvXOkn6R6ZoGC/R4a8vvbZgpyOfhI48xzvk=
Subject key identifier: EF:81:90:F9:90:94:9B:5C:8A:CE:8F:B3:AD:2F:22:00:C9:E4:08:31
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 01974B1F5900BBD925D670BDA3212DC00555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 02F3
Signing time: Sat 07 Jun 2025 16:00:34 +0000
Manifest this update: Sat 07 Jun 2025 16:00:34 +0000
Manifest next update: Sun 08 Jun 2025 16:00:34 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: /yw6ZIrWaUjiXDIXl/YOA6W5ZEuw+c3ZGtwNp39pCFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:59:00:bb:d9:25:d6:70:bd:a3:21:2d:c0:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Jun 7 16:00:34 2025 GMT
Not After : Jun 8 16:00:34 2025 GMT
Subject: CN=ef8190f990949b5c8ace8fb3ad2f2200c9e40831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:81:71:b0:f5:f9:fe:a6:70:36:bd:fc:a2:
98:5c:eb:78:7c:8e:8e:39:6c:6d:52:a0:2b:89:82:
98:fe:62:e9:e7:32:09:30:0e:e7:b6:d6:8e:f4:98:
fa:69:d8:b5:32:b0:21:25:85:38:de:8c:69:92:16:
20:29:76:1f:55:6e:9a:e6:ea:ad:17:b2:3a:46:35:
63:bf:dc:90:ac:57:d6:71:aa:65:a3:73:c6:74:09:
a8:49:04:87:ff:d9:95:81:19:c1:6a:59:63:0b:39:
63:2f:d4:d4:6d:96:de:38:32:d8:d7:99:f7:e2:1e:
d4:45:ef:59:e1:ac:70:91:03:e8:26:92:30:fd:43:
1a:69:51:71:fd:a7:73:e0:86:28:88:2f:37:6a:cb:
9d:58:cf:a6:6c:58:b9:e2:40:9e:ac:56:ef:4f:d1:
32:fa:77:84:99:aa:5e:f1:c9:9f:ea:25:c7:84:68:
0a:c8:27:2c:a4:aa:66:6d:3c:91:9e:c4:52:00:05:
ec:49:5e:93:23:75:34:c7:f3:6c:ec:19:fa:f3:0e:
f4:3c:bc:fb:39:5c:04:8c:51:4f:bb:4f:f8:32:00:
54:40:79:5f:fc:e2:5d:58:90:bb:05:8d:8b:2f:f7:
fe:66:52:e5:60:cd:48:db:6f:2e:99:35:cc:ef:e6:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:90:F9:90:94:9B:5C:8A:CE:8F:B3:AD:2F:22:00:C9:E4:08:31
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:55:21:3f:94:58:f4:a5:e2:ad:b1:34:2b:57:c8:c6:e0:
b7:23:ea:ea:58:ef:3f:c1:88:6c:7d:2b:a3:ce:93:c3:ff:78:
81:13:43:9b:79:94:f8:58:5b:35:58:2f:99:f9:8d:e4:87:90:
ee:57:ca:e4:4f:80:04:c1:82:27:d0:aa:07:7d:55:80:9b:48:
28:3b:93:67:64:82:0b:37:42:44:6e:a1:ee:e2:1a:71:48:5e:
f1:ac:91:a2:75:57:31:3d:85:48:b5:0e:2c:6e:cf:78:fb:f5:
24:a8:67:54:d7:57:48:da:37:b8:7c:8c:35:18:36:0a:33:dc:
59:f0:70:25:f2:65:ed:95:81:95:c7:10:a8:68:5e:fa:06:cf:
25:75:f9:f6:40:4f:d2:25:16:ef:09:43:02:41:4c:12:a9:63:
79:1d:b4:7b:8a:a8:04:ec:c2:63:2c:57:aa:ad:83:95:d4:02:
73:e2:08:82:9d:c0:a4:7c:e6:2b:2c:f8:48:9c:4d:e3:1f:fa:
18:2a:98:9c:5e:c8:45:49:f1:24:2c:ac:07:e4:0f:bc:5d:e7:
da:30:6c:6f:a9:a0:3c:f6:96:b4:fd:75:26:71:39:93:0b:50:
f8:d3:86:40:7c:66:60:be:fb:48:67:3a:47:e2:b5:1a:8f:44:
2c:52:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:20 2025 by rpki-client