Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: iahGt9WTMyI+xIgiVD5QZ42vUmzIV72POHgmZOh7+Kg=
Subject key identifier: 94:86:BB:78:4F:A5:49:F5:36:8C:45:05:A6:3A:4A:39:C0:09:A0:95
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 01975CEEFEF88AE72D606D5936A8F2897EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 13A9
Signing time: Wed 11 Jun 2025 03:00:56 +0000
Manifest this update: Wed 11 Jun 2025 03:00:56 +0000
Manifest next update: Thu 12 Jun 2025 03:00:56 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: 2uD3jQRDBG3L7Gs8vgH6H/KqxAYiTtSvKpO9NQ6vHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:fe:f8:8a:e7:2d:60:6d:59:36:a8:f2:89:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 11 03:00:56 2025 GMT
Not After : Jun 12 03:00:56 2025 GMT
Subject: CN=9486bb784fa549f5368c4505a63a4a39c009a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ba:99:10:77:92:e7:ac:9c:4d:0b:f0:9e:a6:
a7:59:f0:5a:d9:1d:44:95:b9:26:59:5d:fb:ae:f3:
83:b0:bf:61:af:fe:76:4e:54:f6:11:93:3a:07:a3:
5f:fa:0d:fc:46:7c:3d:b4:04:85:77:d8:fb:6c:82:
1e:46:a5:65:ed:b4:f0:f7:12:44:0b:20:e5:08:c9:
5e:09:15:2e:1f:9d:e7:f6:ca:e6:ca:98:c6:bf:94:
68:fb:ce:51:ff:a3:c1:5f:5c:ef:da:ab:f4:5d:f4:
af:4e:66:0c:cb:a2:45:9f:5d:df:90:9b:ae:eb:1a:
9d:ee:d6:07:9b:02:71:84:e8:7d:82:4f:32:6e:27:
11:3e:7a:13:0f:ea:54:32:a3:93:56:64:21:29:1d:
53:d1:a1:5d:bf:ea:69:66:e8:e3:90:e1:eb:e1:79:
62:29:af:ce:a8:e6:ca:df:ee:f1:a1:2a:d7:2d:2d:
bd:fa:fd:cf:20:45:66:bc:b2:7f:3a:56:ec:2b:b1:
c8:8b:af:d3:43:4a:45:dc:95:da:d3:f0:a3:c7:ec:
45:fa:1d:9b:c9:ba:be:e5:34:4c:aa:93:a6:40:d2:
67:47:ff:fa:c2:83:8e:39:bd:7a:12:ce:d1:ae:e8:
13:03:ae:eb:b3:7a:8e:17:b3:60:41:29:68:83:27:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:BB:78:4F:A5:49:F5:36:8C:45:05:A6:3A:4A:39:C0:09:A0:95
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:63:cd:af:d7:cf:48:71:37:5d:0c:48:0c:29:db:1c:1d:15:
2f:f2:5f:9d:f1:aa:75:dc:8a:4d:6b:30:dd:b2:fa:70:8e:82:
94:8c:5d:a5:4a:a9:ed:c5:a7:de:17:39:48:5e:52:9f:39:86:
bf:77:ef:a6:2d:4d:4a:13:bb:bb:6a:a3:fc:a0:e8:05:14:16:
23:1f:43:ed:96:b3:21:fb:83:f2:05:33:2f:7f:da:51:a6:a5:
07:b0:97:c6:28:e6:c7:5b:84:e3:94:f3:fd:0c:21:53:47:e8:
65:d4:72:9e:ad:f0:68:80:eb:77:e2:2c:be:91:dc:04:23:ec:
35:38:de:64:f5:2a:d4:ed:7f:bc:c0:34:3b:2d:99:1f:c2:8d:
d3:9d:4a:d3:98:70:32:40:c0:f5:3e:c8:ef:39:9b:f5:10:ed:
57:20:3d:c4:1f:c7:fc:14:7b:ab:52:24:d2:b8:ab:ce:dc:45:
47:5c:84:d1:1b:f0:d2:b6:9a:8c:08:49:6d:97:5a:f0:b3:68:
02:7c:6d:a9:ef:7a:17:db:30:c2:df:57:9a:be:a4:ed:d2:1e:
6c:00:af:d5:03:0c:d2:fb:36:32:d1:a0:a5:dd:eb:00:50:3b:
32:1b:42:97:f9:5b:e6:56:a0:f1:6b:be:67:38:5f:7a:80:db:
6e:06:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:25:59 2025 by rpki-client