Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: 020WAJz88RGA0pZfDsh3XESGck7Lqi03wdTqXF1BuGw=
Subject key identifier: A7:1B:AF:26:90:C4:2A:3E:0C:DD:0A:E4:3D:E0:8D:09:BC:44:6D:1F
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019764A8451DEE3716AB7C21C183550EA6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 13AD
Signing time: Thu 12 Jun 2025 15:00:38 +0000
Manifest this update: Thu 12 Jun 2025 15:00:38 +0000
Manifest next update: Fri 13 Jun 2025 15:00:38 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: dojcqhg2uwkAkl20JXAR2ATGQjQqzuEiQU1hacYQMAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:45:1d:ee:37:16:ab:7c:21:c1:83:55:0e:a6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 12 15:00:38 2025 GMT
Not After : Jun 13 15:00:38 2025 GMT
Subject: CN=a71baf2690c42a3e0cdd0ae43de08d09bc446d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:58:41:10:f3:55:ef:9d:e8:e4:ad:f9:4e:
49:b9:03:42:d7:96:14:41:93:b9:96:86:5c:62:4b:
95:50:c2:75:73:be:1d:63:36:e2:fc:4c:34:6b:08:
22:0d:a9:79:ba:2e:ac:c0:65:43:2a:6a:77:dc:33:
67:9a:86:05:13:92:8f:6e:6d:2c:86:e7:af:5e:9b:
96:f0:a8:cf:12:13:de:58:00:68:67:82:45:07:71:
a5:ab:45:40:92:53:59:f6:08:57:65:f8:ac:14:87:
13:e8:16:6b:25:35:9e:29:6f:c7:42:8f:bb:d0:f9:
c9:4e:2b:d3:a8:33:72:59:18:27:ed:7a:97:83:13:
aa:85:a0:72:43:0d:e1:f2:9e:72:f1:62:cf:2a:2e:
65:f7:b7:5e:2d:cb:b9:64:b1:b1:63:be:4d:38:a3:
80:4f:3c:20:33:4d:58:53:68:6f:a2:02:3d:4f:e4:
c6:1d:d0:81:1c:32:af:51:41:d1:8e:e4:c3:1d:77:
28:fb:17:33:21:3c:2d:2f:36:89:83:50:07:c5:c1:
8c:3a:d8:b8:c2:36:2a:cb:3d:c4:5b:7c:58:29:c7:
cd:d6:4d:93:78:35:72:c4:5b:13:a1:14:72:a0:8b:
e5:15:2e:12:fc:3d:60:b0:5d:3d:ec:7a:71:a2:9e:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:AF:26:90:C4:2A:3E:0C:DD:0A:E4:3D:E0:8D:09:BC:44:6D:1F
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d9:81:07:f9:34:76:e1:8f:a3:a4:bf:23:65:cf:5d:68:90:
0e:f8:8b:df:55:0e:cb:e3:ca:ad:4e:22:65:af:03:01:2c:3c:
b0:e5:dc:15:7c:d9:a9:61:27:c2:c4:e4:40:30:c9:cf:9c:3d:
3f:d5:40:69:bd:99:87:d2:dd:60:bf:77:b3:54:f9:53:b2:80:
56:68:c5:df:15:94:e2:55:74:a2:a5:5b:d5:4d:6c:6b:07:f3:
4f:07:cc:22:bc:78:05:dc:87:e8:9d:98:3a:19:17:54:dc:11:
d9:2c:f2:1b:b0:13:5d:bf:46:55:0b:6a:cc:80:25:6e:7b:ea:
2c:f8:30:54:d6:c6:9a:13:67:94:b0:ca:de:34:96:db:cd:01:
c3:4a:3c:7e:fc:cc:b7:02:d8:a1:fb:7b:16:31:66:ca:d8:52:
fb:39:92:b4:fe:f4:f4:6a:e2:dd:22:ee:8e:26:c1:05:24:45:
8a:3d:bd:ff:37:58:39:4f:f6:95:b3:55:2e:2a:9a:e4:64:be:
52:3c:2d:c6:2d:3b:02:e8:11:8a:c4:41:1c:b7:01:5b:bf:ce:
98:82:d1:9a:96:31:26:bd:3b:6a:c7:d1:bf:b5:b4:e3:b2:94:
85:98:18:3a:00:30:61:6a:d7:1b:27:0d:f8:a5:79:f6:46:fe:
22:df:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:31:35 2025 by rpki-client