Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: soCmsuHTYP9OFCpPISk4vuI9KVJsYlGRzwwUnmCc1S0=
Subject key identifier: 73:36:01:F2:00:F8:8B:64:56:E1:97:5A:A3:EB:15:D5:8F:9F:53:F7
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 0197B6D7A167F38E931E0346DE96A4EFF07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 059F
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: Ar9NLst8QmoOpJIwAokNswZ8izdXymLzhkAbTM2TEQY=)
2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a1:67:f3:8e:93:1e:03:46:de:96:a4:ef:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=733601f200f88b6456e1975aa3eb15d58f9f53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:a6:58:37:17:6d:7c:25:3a:e4:91:de:dc:
f6:12:41:cc:4e:c2:96:ce:ef:b2:7e:64:b5:35:a6:
68:f3:df:e6:3b:30:42:bc:58:83:61:5d:57:15:7f:
29:d2:86:70:ec:f9:8e:5c:22:85:5d:3a:b5:60:91:
5a:48:da:ad:fb:1d:90:7d:cc:2e:a2:ec:b4:da:62:
71:30:fd:eb:ae:36:72:f9:6b:b3:f2:c2:94:47:97:
74:87:5f:3c:92:39:16:6d:19:1f:2a:29:f1:c4:34:
a4:a0:b5:b3:63:19:8b:2b:ba:11:23:1b:fb:cb:75:
e7:4e:a2:60:47:73:23:f7:a1:e2:43:7d:fa:02:42:
56:17:7e:78:31:60:b2:95:3b:ee:e1:38:6c:96:98:
b3:a2:10:13:2b:e3:ff:ba:8a:8a:02:cc:e6:32:6f:
00:92:7b:a5:2a:73:91:95:fb:d3:24:79:67:bd:4e:
87:6a:c4:bd:ef:ed:34:d6:bf:e4:1f:80:38:22:11:
20:9e:c0:8a:41:75:0b:20:20:12:e6:43:a4:64:c6:
ea:9e:16:1d:05:58:6d:a1:69:eb:04:6a:05:91:46:
c3:05:d1:2a:68:d7:a9:2e:8e:69:07:6f:2b:7e:34:
4c:21:25:4a:a6:f3:be:b7:2f:1a:31:17:69:29:78:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:01:F2:00:F8:8B:64:56:E1:97:5A:A3:EB:15:D5:8F:9F:53:F7
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8f:51:f3:b3:1f:f1:fc:cf:aa:f2:28:d4:03:29:2a:9a:94:
c4:62:2a:29:39:28:ed:9e:dc:d2:fd:06:0d:7b:52:bd:55:8c:
68:51:56:62:f1:db:61:e4:fd:28:fe:1a:6c:84:9e:49:ae:a8:
f9:48:f7:f2:1f:ee:f4:2a:59:51:af:34:b1:4b:de:90:cc:a6:
ba:9d:6f:22:62:4a:2c:9d:9d:f3:d1:38:6e:22:48:64:9d:d9:
53:d9:94:78:7e:2d:33:08:af:c4:a5:43:a0:de:a1:50:69:e9:
f3:90:ac:c6:1e:51:d2:fd:af:6a:a4:d6:9c:20:3f:35:14:9d:
72:3a:4b:cd:14:87:f3:9e:57:e8:bf:74:bc:03:e7:b0:da:e0:
9d:eb:52:eb:40:cf:3e:e2:99:c1:47:d7:43:22:bb:79:81:f5:
b1:08:c9:6e:a9:f1:61:3a:43:7a:09:9d:23:6c:c8:cc:53:12:
18:20:a0:20:2a:51:38:33:ec:87:18:14:c0:fe:45:18:e3:4f:
03:80:c7:03:69:5a:b5:61:69:3d:71:1d:11:1c:eb:14:7a:51:
56:5c:e2:59:e5:40:f1:ee:b4:82:2a:78:6b:22:a1:70:04:39:
ea:7d:02:46:15:e2:cf:1e:9e:d1:5d:79:c9:d5:79:b1:f0:99:
b1:a5:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:21 2025 by rpki-client