Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: IJUok0cK5BhbPJR0DG+QoXWqrG70VhtNcLQ9++fx5zw=
Subject key identifier: A5:A9:73:CB:51:06:4B:58:E2:8F:A5:4D:9E:42:04:62:1E:9D:64:30
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 0197B933EB3423CFAA1168926312692D06BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 1059
Signing time: Sun 29 Jun 2025 01:01:16 +0000
Manifest this update: Sun 29 Jun 2025 01:01:16 +0000
Manifest next update: Mon 30 Jun 2025 01:01:16 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: QzlT6uOANzh96MTkCyc7QnG2357P0nyi7xPD42boLbQ=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:eb:34:23:cf:aa:11:68:92:63:12:69:2d:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jun 29 01:01:16 2025 GMT
Not After : Jun 30 01:01:16 2025 GMT
Subject: CN=a5a973cb51064b58e28fa54d9e4204621e9d6430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:fe:54:d0:78:6a:07:9e:c6:f4:61:f3:65:
a3:48:c4:ec:67:b9:39:7d:47:f8:78:d8:4a:52:6d:
56:77:b7:53:da:1b:5d:9e:9d:82:14:0c:57:d6:28:
bd:98:54:89:2b:3b:75:8f:2b:c2:ce:75:e3:cb:ce:
80:6d:d9:1c:5d:34:fb:d4:f5:7f:18:31:b5:fb:ab:
4d:a6:04:3b:da:f4:b0:e8:80:17:fa:7e:e6:77:e3:
7e:2f:78:cf:78:ab:e0:87:43:2a:8f:af:b1:db:80:
fc:31:d3:bf:bc:29:86:0b:74:1b:6f:f6:79:49:2f:
48:3c:5b:60:7a:61:9a:a6:32:57:e4:cc:d3:56:4a:
f4:3b:d2:d4:c6:b6:a8:64:7f:a9:ac:bb:66:af:12:
9f:44:c6:5f:df:9e:6a:a1:a0:c6:fe:d0:aa:b0:a9:
1f:ff:68:2a:8d:52:ea:d8:1e:fe:2d:8e:d9:3c:64:
4f:b0:f6:c8:d2:83:74:f3:71:ff:20:bf:4f:2a:91:
ae:a8:0f:cb:f5:35:3c:19:f2:26:3d:ec:3c:cb:cb:
46:c9:bf:7d:31:ec:38:0f:a1:f3:51:20:65:80:db:
0c:6b:2f:1d:71:66:59:78:1d:7d:e8:33:49:62:5e:
af:14:c7:5e:b8:89:2a:2b:65:7d:a9:c7:e8:b1:75:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:73:CB:51:06:4B:58:E2:8F:A5:4D:9E:42:04:62:1E:9D:64:30
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d7:0a:f3:29:56:5c:c8:f3:e7:6f:85:8d:e6:b4:90:b5:72:
00:1e:23:39:eb:e6:13:35:94:7f:23:11:86:7e:ff:d5:2c:64:
ba:3f:54:71:83:67:ce:66:06:d4:af:5c:0f:3e:39:02:73:85:
97:44:1a:ae:8b:3d:fc:d7:0f:68:c6:66:b5:f0:b5:32:62:fd:
50:bb:0f:79:d3:e6:b4:f8:93:a3:26:8c:66:2b:f2:dd:e3:59:
0e:18:64:0d:b6:d5:f3:ae:9d:50:5b:ad:a2:44:7f:26:0c:c3:
8a:84:2e:a6:86:75:31:fb:58:6d:16:f7:b9:22:38:3a:a0:53:
b9:e7:e1:29:60:0f:8b:d1:bf:65:53:cd:65:33:a0:9b:91:df:
2c:f6:3b:47:3d:13:89:ca:06:02:65:f4:bd:6b:3c:8b:d7:9e:
17:1b:2e:ff:f4:08:fa:87:66:e6:4f:78:b5:e6:20:ea:51:94:
1d:3d:b1:14:2f:88:22:5b:9c:a8:ad:96:31:31:40:ca:a8:bb:
68:0e:51:49:e7:5c:b4:c6:bf:2c:bc:82:36:84:9d:ae:f4:ae:
8d:65:d6:c6:e1:de:d1:4a:95:25:d9:b9:20:d8:d5:22:9c:e0:
f6:57:bb:bb:49:39:a2:92:85:09:37:4e:94:03:37:60:ab:cb:
5d:60:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:56 2025 by rpki-client