Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: OAd7t4GipxXbqfxmly0fH6ljEk5rpKRtZQoahq2AF7I=
Subject key identifier: D6:4F:A9:87:F9:14:A9:FC:7A:AB:96:E3:FB:1F:F7:04:64:CA:69:D7
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0197BA0FA4E24611C101746FCDB8CBA9D22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0F1D
Signing time: Sun 29 Jun 2025 05:01:16 +0000
Manifest this update: Sun 29 Jun 2025 05:01:16 +0000
Manifest next update: Mon 30 Jun 2025 05:01:16 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: nXVCKmbFFmxrdXNo15OUyU9auZnkcRGoLhPVXJqAiCI=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:a4:e2:46:11:c1:01:74:6f:cd:b8:cb:a9:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jun 29 05:01:16 2025 GMT
Not After : Jun 30 05:01:16 2025 GMT
Subject: CN=d64fa987f914a9fc7aab96e3fb1ff70464ca69d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:0a:5d:32:44:fc:a7:d8:00:f9:ed:51:2f:
01:b4:e2:04:ff:d4:e3:5d:05:78:5e:62:4b:66:f1:
de:a8:0d:c7:8c:80:26:65:70:67:d6:9e:e8:21:fc:
3a:04:fa:21:03:b1:08:05:4f:95:cf:cc:75:8a:7b:
c8:a7:17:85:c4:86:a8:fd:cd:5e:3e:e4:df:f4:bc:
d2:41:6d:b6:63:61:cb:7e:ec:78:66:5f:ba:42:31:
04:28:e6:94:74:59:c3:c9:e2:3c:c8:2a:ca:68:a1:
4c:c9:b7:83:3a:5b:c0:93:b0:f8:09:ac:6d:6e:fe:
b9:a3:a5:51:6d:84:3b:25:a6:8f:30:b5:3b:26:83:
50:1b:a7:6a:83:ad:d1:10:44:31:31:f6:77:32:ec:
55:74:79:43:2f:f6:54:9e:43:ab:b9:88:ae:75:d6:
2e:68:fb:af:34:3b:09:7b:a1:d0:31:1e:3c:b0:69:
04:04:0a:f5:fc:8d:42:bc:49:5c:1a:ed:ea:2c:3c:
e6:5a:c8:63:9b:76:43:de:27:cf:ba:86:11:16:4a:
04:90:59:74:30:ac:51:1a:bc:e3:49:fb:29:3e:14:
01:f4:7c:81:1c:05:34:c6:71:08:e2:db:78:27:a7:
c5:df:0e:30:c3:31:40:f6:fc:72:4a:e0:8f:22:05:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:A9:87:F9:14:A9:FC:7A:AB:96:E3:FB:1F:F7:04:64:CA:69:D7
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e6:2f:fa:43:79:9e:44:4a:1a:f2:93:b3:46:f1:cb:18:51:
4f:96:56:3d:85:97:81:40:d7:37:07:f6:8b:dc:08:c3:77:a0:
c4:4c:26:c4:1d:3f:3b:11:85:3d:9e:a0:22:a8:2f:95:40:64:
05:93:e4:b3:16:ee:b4:22:29:6c:a1:16:c6:ec:13:ce:5d:21:
42:70:13:1a:5c:b2:a9:d9:91:17:86:8d:c5:0b:4d:94:19:18:
55:39:2e:47:2b:76:42:b1:98:e5:87:5b:79:44:1c:a7:54:32:
4b:4e:e6:ce:6d:08:98:fa:96:29:29:a9:47:3f:44:24:f7:14:
d3:d3:92:43:54:fd:2b:7c:18:ea:aa:b0:e8:ab:f3:0a:df:36:
51:a6:41:80:e4:ff:1d:4b:ce:1a:85:da:b5:ea:3f:56:09:cd:
6f:04:b6:ce:22:57:99:38:70:80:c9:e9:a3:ff:37:e5:df:e4:
5e:cf:c4:5d:fb:a4:3c:1c:66:dd:75:3c:93:43:98:b7:08:e6:
94:34:c3:76:cc:90:93:91:cb:2f:c7:01:1d:18:50:eb:9d:5e:
03:e4:93:1b:7a:1e:74:6c:ce:c5:53:85:ae:f1:f5:e9:f3:67:
b2:82:df:b9:a9:8b:f4:98:55:7d:2d:6e:39:f9:06:d9:65:94:
d2:b3:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:16 2025 by rpki-client