Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier: hDJZxw24QFblvyOEto6iQWupGE7fc3CgXgkijfnPKRk=
Subject key identifier: 5A:6A:8A:AF:C3:C5:03:B8:00:74:53:91:1E:1E:A3:5E:35:F7:55:4B
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0197B821085450B29C632F6FB2D14AA89AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number: 12FD
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: 1Hdm4Yb6uudKtF7Z6GZsQybyHjU.roa (hash: W7Iji0sZOuTaW08iAlZ0I50hV2fJR5fIhMcUjQTgllQ=)
2: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: DdQvVOenoCr204ix2XlaJqF2MMhTdS8su2kTXiGAKRg=)
3: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=)
4: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (hash: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=)
5: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:08:54:50:b2:9c:63:2f:6f:b2:d1:4a:a8:9a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=5a6a8aafc3c503b8007453911e1ea35e35f7554b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:f9:5d:6f:da:ea:c5:47:5a:e6:07:91:eb:
33:2d:d0:2c:40:7d:95:02:94:7c:71:9a:ef:ec:39:
6e:be:e6:1e:2f:1d:72:b1:61:fb:63:06:20:41:fa:
d3:85:4a:3e:3d:28:56:9e:fc:e7:83:2f:4e:76:76:
b1:df:e6:6b:63:75:28:e8:ff:77:5c:c0:b0:18:c8:
47:07:65:ca:db:4e:52:e2:f5:24:81:e4:fe:89:a0:
a1:6b:1e:e1:cd:5d:33:0f:3b:c9:88:9b:ec:03:c8:
33:2a:99:d3:73:e9:81:a0:88:e6:c3:b4:b5:57:06:
72:e1:1a:96:e6:21:ab:50:97:e5:29:b3:ad:c3:93:
0e:f5:f2:85:e5:67:2e:2d:58:6a:0b:e2:91:e7:7f:
9a:76:37:2b:bd:ea:37:50:72:2d:71:07:8a:91:0f:
43:20:88:7a:19:19:8b:26:39:2d:40:9d:59:c3:ed:
e4:ad:0e:d4:3f:56:f9:3c:0e:6d:d7:90:81:c6:26:
df:46:dd:68:06:11:1a:75:ac:07:c9:39:8e:8e:3f:
c4:ff:c7:87:6e:5c:0c:15:dd:12:22:f9:d5:75:7f:
7e:f2:ce:d4:89:df:7b:04:d2:01:1b:35:35:e1:f9:
4f:48:33:c6:1f:86:78:94:5b:9f:7d:90:62:c5:bb:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:8A:AF:C3:C5:03:B8:00:74:53:91:1E:1E:A3:5E:35:F7:55:4B
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:3c:5c:34:a4:51:95:4e:ec:1e:36:4d:b3:63:60:cc:9a:
dc:6d:68:76:21:0f:30:95:7e:7c:0c:a1:b2:d9:e3:67:b7:fe:
18:de:6b:19:59:70:cf:43:b3:d5:7f:30:1d:69:da:e5:e4:06:
4b:03:5d:59:df:f0:81:83:c2:62:07:6f:91:9d:25:3a:61:2a:
58:9f:95:cf:0b:52:e2:f6:09:59:df:38:db:05:80:25:64:45:
29:07:ae:c3:33:01:04:db:d1:49:6d:26:04:90:52:4b:1b:42:
e8:04:5c:c4:39:ef:b9:53:1b:a2:83:7d:66:58:b5:79:00:d3:
19:3e:12:70:36:7a:82:68:e6:4a:d4:ae:33:1b:d7:ed:45:e3:
98:56:07:9b:4a:eb:86:6d:d6:6c:13:d1:95:fa:c2:e6:2e:63:
46:d7:1c:a0:70:9b:d0:be:0a:88:b6:c5:a2:04:f3:eb:2b:62:
b8:c8:02:aa:6a:ad:b4:5b:71:28:23:16:29:c9:b1:97:75:b9:
64:23:e7:75:1f:d2:81:86:90:8f:cd:e2:3e:7b:65:b3:41:80:
ba:66:24:98:1e:ec:95:f6:42:c8:96:3a:b6:fb:c3:5e:ba:00:
26:eb:99:1b:6c:f5:7a:d2:6e:4c:13:37:8f:d5:32:5a:fa:8b:
af:a0:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:04 2025 by rpki-client