Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: FrHyYRd1w2gR33Vo5BACj4E9ngsqLx97/QHoIn/92AA=
Subject key identifier: C5:CD:BA:63:B2:1D:B7:54:67:71:1C:7D:4A:B6:66:B4:2F:E7:DB:46
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0197B74532D93CAC69A8ACFE4645BF27CBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 104C
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: tjqhbhbMEEqKFlqTv/8qJQBzF8YKvXH0kd1qo+0vzNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:32:d9:3c:ac:69:a8:ac:fe:46:45:bf:27:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=c5cdba63b21db75467711c7d4ab666b42fe7db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:52:84:57:c6:7c:07:6e:f1:a0:8c:fa:76:
36:0e:9e:fc:28:bc:96:74:34:fa:eb:d6:d5:93:2b:
d0:ed:ee:25:72:4e:d1:14:17:e7:a1:1e:c1:33:34:
01:a6:54:28:97:ef:44:28:b8:51:39:30:2c:32:0e:
65:be:22:db:40:ff:f8:5e:93:50:4a:22:c1:ec:be:
1b:01:ea:5c:6f:e6:6a:70:71:fc:f9:25:e3:0a:14:
5d:71:b3:15:03:11:b1:a6:3d:d5:39:88:ae:9f:29:
09:dc:82:40:0d:64:4e:60:f8:16:20:02:36:09:ef:
23:77:b4:27:ad:d5:19:a9:2a:c1:66:49:f3:a7:13:
5e:cd:9b:84:36:b0:c5:7d:2c:e4:e3:a2:a0:01:ce:
07:3b:eb:ea:3e:34:60:58:8f:87:c6:6e:d8:c2:db:
34:4a:13:cd:12:7a:9e:9d:ae:89:fd:87:ce:65:4c:
5d:cf:38:d8:7c:a5:58:20:1b:b0:41:47:39:04:77:
77:5c:54:a6:8d:b7:77:de:c2:b8:ff:39:99:f5:10:
96:ea:b3:95:0e:33:7d:1a:a7:9f:57:53:90:f2:76:
ff:75:6a:1c:13:6a:73:37:03:db:fa:36:e7:1b:be:
63:9c:0b:03:fe:7c:d1:25:fb:0a:df:27:de:79:91:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:BA:63:B2:1D:B7:54:67:71:1C:7D:4A:B6:66:B4:2F:E7:DB:46
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:32:bb:dd:ab:03:35:1b:f5:9c:5b:31:a9:7e:65:ec:be:
0f:21:85:21:36:02:ae:5a:50:eb:9b:bd:fc:48:7e:a8:d3:ba:
1d:47:57:00:0e:66:fd:41:54:eb:57:5e:97:a7:67:84:57:60:
bb:a4:33:9d:e7:e8:fd:82:da:0f:c2:33:35:8b:e9:99:6e:89:
67:65:15:de:ef:aa:c3:18:97:fc:84:97:02:20:3b:0c:4b:ce:
d9:d1:7f:8a:13:4a:7d:ac:7d:e7:5d:b1:0a:a8:8e:99:1a:84:
70:eb:28:a0:3e:b6:ef:54:3a:ed:aa:c2:fb:9e:a7:92:7f:15:
aa:ee:92:a8:c0:43:51:16:3f:9e:97:1d:71:fc:c6:3a:30:10:
0f:43:0e:37:7f:e2:1f:0d:a8:e1:e5:af:0e:48:b5:e5:4b:dd:
69:9a:ff:a4:5b:7f:eb:bb:4b:c4:36:dc:40:ae:92:e7:d9:66:
d2:ee:ea:2a:ef:c0:b5:0c:7d:d7:a2:f8:a8:ab:e1:f0:4d:79:
0d:fe:59:91:b1:ec:25:84:3c:aa:4c:3b:3f:a0:7c:8a:0c:46:
9b:62:46:61:98:83:9c:b6:a5:88:98:08:05:56:6e:dd:94:44:
19:ca:c0:d2:90:cc:ef:11:00:69:87:f3:f9:b3:99:b7:19:60:
f0:c0:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:19 2025 by rpki-client