Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: pWMAfNbnP01fK+bekgVlIiJXvO3SzHRB8Puo5waT76U=
Subject key identifier: 59:70:8C:67:93:EB:FC:02:FB:07:C1:2A:9F:BB:11:49:F5:93:B3:3C
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0196A2406DF62250142CF5EFD2F0F049F3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0631
Signing time: Mon 05 May 2025 21:00:53 +0000
Manifest this update: Mon 05 May 2025 21:00:53 +0000
Manifest next update: Tue 06 May 2025 21:00:53 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: Zrslj2ms4OHF+TtnOnRFJx4pr1/dWz36kCDQCtNEb40=)
2: XYDcPLsMJ5XYkYL0PQrHKhNJ9s4.roa (hash: 1m7+mEL2iJYkvJfrDXaZzofwFCojsAzxm4zXV5nNyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:6d:f6:22:50:14:2c:f5:ef:d2:f0:f0:49:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: May 5 21:00:53 2025 GMT
Not After : May 6 21:00:53 2025 GMT
Subject: CN=59708c6793ebfc02fb07c12a9fbb1149f593b33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:48:8e:25:de:4b:c4:97:83:c6:44:e6:fe:
71:d9:f6:52:95:73:92:5a:1e:65:a0:e5:05:28:2f:
55:c7:bd:15:50:fc:4f:7b:fb:b2:00:d7:f5:ea:b0:
4c:55:e5:2b:75:a9:cb:cf:35:83:ea:b6:53:89:e5:
55:08:4e:5c:bd:df:69:79:0f:21:39:f9:dc:27:c7:
0f:22:44:0c:30:48:3a:10:0f:15:a5:c1:02:7f:eb:
58:f3:db:ff:de:af:9e:39:bc:56:f9:cf:d5:83:12:
1f:ea:a4:03:ac:93:f0:62:e5:e9:a0:97:50:46:19:
0f:60:ef:94:87:a7:6e:05:31:3c:40:cf:d9:31:36:
ba:36:22:78:cd:d8:7a:6c:da:29:86:81:39:60:46:
01:a4:f3:ef:e7:03:89:d1:7d:d7:e2:7d:0e:d6:7c:
86:cd:25:ca:d1:dd:90:20:4e:38:60:51:ac:a3:07:
05:45:b6:08:ba:4c:41:43:5d:ca:79:78:62:a9:74:
72:d9:b4:99:19:41:de:3c:72:5e:39:7d:8b:fc:3c:
48:6e:50:22:91:4a:e9:62:e9:b7:a9:df:d8:59:37:
ed:4a:22:16:f4:b9:0c:83:7a:22:d5:3f:5a:2d:bf:
80:c2:c2:53:7e:76:4a:cb:3c:69:b4:36:fa:f4:1f:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:8C:67:93:EB:FC:02:FB:07:C1:2A:9F:BB:11:49:F5:93:B3:3C
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a8:17:40:a6:a1:7f:c7:83:01:b0:e7:b6:9e:d5:c4:a3:87:
41:8b:da:e8:9b:4b:6d:20:14:76:ca:10:18:20:42:e4:c9:65:
a9:58:03:24:82:84:92:e8:4c:c5:b1:7c:ed:a2:33:9f:df:39:
3a:ff:2f:ff:07:f0:79:19:73:7c:98:17:30:94:4f:88:75:ac:
18:23:eb:a3:33:df:7b:78:33:06:19:2d:a6:76:bf:8f:6a:71:
cb:87:6f:bd:51:4b:c6:69:fd:01:03:a5:09:7c:77:7d:ec:62:
30:1f:39:b8:ae:fe:84:76:fb:6e:7b:2e:2b:c1:d3:79:b0:89:
5e:d7:a3:15:8c:23:87:6c:27:57:d8:5b:cc:c4:ca:68:fa:61:
fe:4a:9d:7e:1a:95:94:80:ad:e5:83:79:86:e9:fe:9d:24:b6:
a4:54:e9:ef:0e:56:04:c5:21:a1:8d:3e:5f:37:56:c9:3d:42:
69:76:25:30:47:2a:9b:59:9e:8e:32:d3:39:0b:9c:03:27:11:
42:41:e8:f0:7a:02:5f:4d:f6:f9:7a:dd:76:3d:13:a3:d3:cd:
54:5b:a4:30:a3:d8:28:a1:f3:1f:af:59:af:90:6e:6a:d2:46:
54:b2:82:df:c6:b5:1a:bd:61:04:fd:12:0e:62:23:45:75:74:
86:6d:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:27:10 2025 by rpki-client