Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: 5Yctbx+vAlBypomjuSCe4sxzAqU09r7IsQSYb4TENEQ=
Subject key identifier: 65:3A:29:AD:E0:58:00:9A:5C:0A:11:5E:3F:3A:E4:76:0F:74:87:F0
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019755359139144ED9308E16F0C33B5B170E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 13A5
Signing time: Mon 09 Jun 2025 15:01:03 +0000
Manifest this update: Mon 09 Jun 2025 15:01:03 +0000
Manifest next update: Tue 10 Jun 2025 15:01:03 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: 9aej8jSBzoGyXk6f1iorRr6/Hnmlsi1S7ugBgf6cldc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:91:39:14:4e:d9:30:8e:16:f0:c3:3b:5b:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 9 15:01:03 2025 GMT
Not After : Jun 10 15:01:03 2025 GMT
Subject: CN=653a29ade058009a5c0a115e3f3ae4760f7487f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:53:b1:a4:9c:27:ef:75:e2:f4:02:04:f3:
03:13:17:63:07:b1:97:db:dd:04:10:1e:37:76:1d:
07:a4:11:9b:6a:79:f3:8c:8d:fa:50:21:75:1e:60:
54:e0:a3:77:7c:a3:9d:f0:17:5f:fb:89:64:e7:6a:
aa:cc:96:de:be:3b:e9:99:d4:0c:9c:10:aa:3c:ba:
61:d4:70:4e:0c:e8:cc:66:21:3c:05:1f:38:eb:e8:
43:66:a8:6e:58:ef:c4:a5:74:71:2c:45:cf:14:78:
f8:64:eb:4a:f4:74:34:8c:90:71:62:f0:d7:64:6f:
af:75:2f:e4:01:f3:0b:2d:cc:cd:bf:31:4a:7f:0d:
c1:72:4c:90:0a:2f:65:56:68:d0:73:5b:9d:67:96:
1b:53:06:68:91:29:f7:ea:38:b6:bc:ef:ba:30:17:
5a:6d:f7:e9:af:ef:bf:0c:ee:8b:ed:2a:6e:f5:32:
17:bf:be:28:68:96:aa:09:25:8e:46:e7:10:e3:39:
26:4f:d6:2e:6b:42:16:2f:ae:12:7a:02:ef:3f:6a:
5e:ce:b8:a0:d4:ab:bb:39:71:03:71:75:c4:84:37:
9b:1d:e3:d2:a9:1e:df:98:de:31:e4:89:68:ee:71:
65:34:28:37:f1:12:32:bd:a4:75:20:e3:f5:fb:6d:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:29:AD:E0:58:00:9A:5C:0A:11:5E:3F:3A:E4:76:0F:74:87:F0
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:9b:cd:ec:68:4e:94:a9:07:32:c3:5d:0d:b1:e9:e2:99:
6c:ba:0a:12:32:52:8c:91:0b:b2:ec:96:b8:07:63:f9:25:b0:
5f:9a:8a:4e:88:26:da:8b:08:19:5a:78:e1:84:3a:71:50:08:
ea:9b:9a:54:17:ce:37:c4:68:5b:69:c0:e7:4e:a9:1c:92:f5:
ca:76:9e:c8:d3:94:c0:56:24:33:7d:20:95:96:88:e6:e7:99:
8f:4f:58:7a:93:c1:7f:58:83:04:1f:3e:12:20:bb:e2:26:52:
28:7b:d8:4a:fb:72:0c:ea:c6:4a:a5:84:1f:e0:7a:94:eb:24:
8e:6c:76:81:e7:dd:95:54:87:3d:5b:bb:3e:f9:98:2f:54:e7:
09:b3:54:d6:97:31:f5:7b:f4:d1:d9:9b:42:ef:9b:5a:2c:0c:
86:e7:d8:8c:64:30:bd:82:c1:8f:1f:20:a0:52:b6:d1:9b:c0:
41:25:76:94:a3:1e:5b:cd:9a:02:a9:7e:77:74:8a:37:79:ad:
41:f9:08:24:65:42:b6:4b:83:96:ac:d2:21:ed:82:41:af:84:
80:6c:4f:70:46:d4:41:52:49:69:94:4e:f5:30:f4:35:f5:50:
b7:f2:c7:2c:36:57:e4:e5:fd:3d:94:8f:b3:e3:c3:c7:9b:4f:
f7:de:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:05:42 2025 by rpki-client