Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: RtaTe54l16BECx5BcwuKcnl9v6roA26KzHlcTUnu0I4=
Subject key identifier: BE:53:DA:79:A0:52:DE:93:6D:38:F1:E7:62:0C:BC:7F:29:71:E4:D5
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 0197B77CA8346E27B51C1C9F7F3F43B44AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 033C
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: MVujEfwbj6f/99dTiezMbatITOm0IiiOUlBt4Lu1OBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a8:34:6e:27:b5:1c:1c:9f:7f:3f:43:b4:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=be53da79a052de936d38f1e7620cbc7f2971e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:23:43:eb:73:af:f7:47:6e:a3:a5:a5:00:
86:d8:3b:88:33:ad:f2:50:89:5c:01:cf:da:78:2f:
3f:72:94:d5:98:58:3f:a9:8e:e9:41:e5:d1:3f:03:
66:d6:a4:ff:d9:43:e5:a9:cc:ec:b3:85:8c:0a:a7:
7f:64:35:4c:e5:ca:0f:b6:b8:48:d0:28:2c:4f:a2:
a6:a3:b4:3d:36:56:1d:13:ed:17:f7:00:f4:9b:18:
0f:49:e5:e6:e3:61:47:8f:17:66:fd:fb:58:50:2c:
f1:fd:46:cd:90:8b:33:a1:4b:48:f6:2f:f9:97:f4:
62:cc:ac:96:3c:45:f4:f4:49:b8:11:af:42:48:b4:
5f:f3:ad:4f:f2:ed:bf:bf:f6:da:f8:49:7f:52:28:
b4:a0:2f:1f:7c:60:4e:36:0c:8a:3e:22:25:b7:fa:
25:91:32:b2:66:5b:ab:39:5b:e9:39:a6:d6:92:3f:
9c:4e:2c:f6:32:a3:9c:17:f8:54:06:14:ef:8d:d7:
a9:d1:bd:af:f1:13:9a:03:80:ae:91:36:a2:c5:b3:
27:00:19:51:62:2c:7e:00:60:27:c0:53:42:f2:38:
20:cf:d2:74:d2:0d:61:4b:f7:8d:d7:64:41:a5:d7:
b8:83:e9:50:66:32:71:10:a4:7a:78:eb:d9:9d:00:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:53:DA:79:A0:52:DE:93:6D:38:F1:E7:62:0C:BC:7F:29:71:E4:D5
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:7d:c5:1b:9b:40:b4:49:37:67:ea:77:6a:18:e0:9f:7e:
f5:c7:d9:6d:bb:75:47:4e:5a:57:be:09:9e:85:f0:67:dd:45:
23:dd:7b:eb:65:6c:df:9b:4a:7f:98:18:09:64:e5:3b:2c:aa:
d8:c0:ec:f4:43:a5:61:e7:2c:23:c8:3e:77:01:35:d0:f9:21:
ef:6e:fd:05:96:42:28:f0:1e:9b:01:cb:cc:0d:f1:7d:f9:24:
6e:65:c4:ad:02:60:91:82:f6:b1:cd:b8:1f:fa:e4:e6:de:07:
09:b5:53:78:78:e2:bb:b6:f7:ca:5c:76:8b:a3:af:62:bd:74:
64:02:39:7a:f7:de:b0:4c:e0:6c:bf:05:01:8b:ac:af:3f:7d:
db:7b:16:7d:07:91:51:40:12:f9:7a:d2:3e:59:5f:5b:95:de:
cb:a1:c8:c2:20:69:02:8b:b5:bd:ea:3e:1f:a3:7d:8b:75:b8:
d5:8d:56:99:69:bb:0a:d4:9b:ee:a2:cf:b0:85:c8:2d:76:13:
1c:da:07:ca:1f:ae:5b:ff:89:fa:15:48:c8:94:cc:8e:4c:d6:
a2:db:77:27:76:ff:3b:e6:fd:6d:09:41:8a:72:46:d6:e5:45:
3c:ac:48:3f:63:a9:08:59:8d:7d:ce:da:76:2b:61:b0:3f:dd:
2b:95:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:46 2025 by rpki-client