Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: Od0wia5cvitT2URCiyOgXszoDaiOqqRLFK7LwSoGWMY=
Subject key identifier: 2B:BB:F1:A8:D0:4C:47:1D:BC:9B:1E:1B:E9:50:93:E8:34:E8:3F:03
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019759125AD3C4175BF4DBAC82CCBE682DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 13A7
Signing time: Tue 10 Jun 2025 09:01:04 +0000
Manifest this update: Tue 10 Jun 2025 09:01:04 +0000
Manifest next update: Wed 11 Jun 2025 09:01:04 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: OzwS4gxEZU0lidcXcd+hGJMRxor9Wkqeo+y3Hr6CLOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:5a:d3:c4:17:5b:f4:db:ac:82:cc:be:68:2d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 10 09:01:04 2025 GMT
Not After : Jun 11 09:01:04 2025 GMT
Subject: CN=2bbbf1a8d04c471dbc9b1e1be95093e834e83f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:aa:2a:14:b3:31:ba:a5:2c:56:18:d8:32:
02:ca:47:9b:8e:af:f5:dd:be:80:6e:64:b8:bf:02:
89:5f:ff:a0:17:01:06:80:d4:a7:3b:e8:1f:d0:c1:
3f:e8:9a:a7:0a:15:cc:6a:c4:e6:3b:c2:55:9f:a7:
1a:bc:98:13:07:32:5d:04:87:8d:84:bd:4d:b0:1b:
0d:99:19:9e:ef:0e:80:2f:cd:46:a7:c0:2b:53:4c:
18:ed:b4:09:10:13:f2:25:11:74:48:66:3a:1d:7e:
34:2a:ee:95:66:0a:d2:29:31:1c:42:82:91:41:ee:
aa:b2:2b:61:3e:86:28:8f:cb:61:cc:6e:f9:3d:99:
cc:36:f2:11:ea:de:a8:fa:6e:a0:66:e0:64:8b:93:
07:f3:c1:62:46:d2:c0:7a:c8:f4:ea:c4:ef:b8:1d:
f6:ca:44:49:2f:26:60:6b:6f:04:0d:65:fe:7e:d0:
22:03:2e:24:d9:7b:ee:03:ad:85:8e:51:a4:1f:c5:
d6:e6:cf:d9:03:b6:57:ff:df:ea:48:c1:3c:be:49:
87:e5:1a:36:39:45:08:9f:31:ca:6c:17:f5:89:1c:
ad:4f:ae:e8:b2:87:14:de:98:3a:ae:e0:61:3e:ba:
6f:49:d5:6a:8f:dd:60:9e:3b:6f:ad:d9:f0:8f:6f:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:F1:A8:D0:4C:47:1D:BC:9B:1E:1B:E9:50:93:E8:34:E8:3F:03
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7a:1c:93:0b:fb:fd:98:40:a0:c2:b0:14:3a:ed:53:af:5d:
e8:8b:98:38:17:0e:6f:16:b5:ab:4b:ba:7b:ef:c2:c3:09:8a:
1a:4f:c4:fd:2f:5a:c2:93:e1:f4:92:35:3a:3e:d3:52:a5:86:
44:ce:bf:de:3d:94:8e:a5:22:5e:2d:13:63:16:a0:5c:c1:b3:
8c:60:fb:f0:a9:1b:65:24:0b:70:a1:f3:a7:e4:9d:49:3d:35:
9c:ec:db:71:e9:00:ba:e7:73:1f:de:04:1c:1c:cd:42:b1:79:
b6:66:24:59:be:7b:bc:5b:2f:07:06:39:70:a3:3d:ea:09:97:
2d:9d:a1:02:7a:75:d0:9b:b9:51:72:7d:2b:5f:ba:6d:ba:82:
db:d9:c9:92:28:1c:72:ff:cb:d7:d3:24:d1:40:d7:bd:eb:ac:
4e:cc:fe:13:cb:e8:6e:df:6c:88:cc:67:94:4d:2d:1f:69:f9:
a0:2c:99:3f:00:44:6e:62:31:15:23:3a:08:4c:e6:30:f1:94:
e5:dd:3a:4e:c0:6f:e7:c0:53:d8:26:33:03:ff:04:51:3d:87:
5f:89:63:a7:53:f9:37:db:85:f1:f4:26:04:f8:8f:9d:ed:e1:
2d:c6:e3:23:73:bd:90:56:ec:ce:42:ec:86:12:a6:fd:82:3c:
03:1c:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:18:09 2025 by rpki-client