Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: H3jO8DLFd7fEmy4Sp5cv9Ujamg/J9QNabN3a+Snia38=
Subject key identifier: DD:75:F1:B8:32:70:A7:DD:5D:84:25:82:E4:27:69:A8:A6:92:56:EB
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 0197B820D4CFEC80AC34890078AFA0A7335F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 0587
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=)
2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: d0Ut95I/uqZ7/FN8zVJcaInO9Os9sjGzrDGvI33A0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d4:cf:ec:80:ac:34:89:00:78:af:a0:a7:33:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=dd75f1b83270a7dd5d842582e42769a8a69256eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:9b:e1:9b:7f:2a:fb:8d:b9:7a:ca:7d:75:
0a:41:db:5d:94:ef:ff:36:da:3b:cd:39:01:30:e6:
6f:0d:ba:75:3d:9e:c2:8e:ea:d4:a3:44:3c:ce:3c:
01:52:93:94:4c:be:ce:55:0d:57:df:27:5f:75:79:
a3:2f:20:8f:b8:b0:a5:c6:60:85:6b:90:8c:5c:af:
f7:db:e7:54:11:54:43:14:12:b2:2a:8b:cf:af:3f:
ba:20:cb:db:ab:34:90:a5:3a:d1:bb:95:d0:4b:45:
26:a8:37:79:ee:aa:ec:0a:34:57:d1:93:7d:cb:aa:
22:30:ad:37:85:1b:5c:6e:13:40:20:ee:bd:3e:64:
cb:39:ab:4e:93:1c:b1:d9:72:a1:82:d1:f4:2a:1e:
29:c6:ca:0d:1e:b9:53:f1:1f:a4:58:e3:56:77:37:
f8:f5:9e:e6:45:03:cd:9b:9c:0b:88:a9:5f:86:54:
e2:c4:61:22:9d:f2:1c:45:41:96:50:ca:c9:e1:b4:
97:19:b5:9c:c3:ee:3f:a9:6e:33:28:64:1e:49:f9:
6d:4b:bb:64:c7:79:a3:2f:f7:08:73:b5:a8:5e:cd:
58:f6:32:9b:ee:02:c0:ec:c3:71:eb:4e:26:96:6a:
75:c3:c7:85:2c:85:45:21:0d:07:fd:57:a8:33:3d:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:75:F1:B8:32:70:A7:DD:5D:84:25:82:E4:27:69:A8:A6:92:56:EB
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:50:74:ad:a6:81:b2:c3:8c:1e:c1:4f:e6:73:a0:1f:6f:ed:
c0:38:cb:13:81:8c:50:23:fc:ea:fe:67:3d:35:8f:14:95:93:
2f:ac:38:01:25:5f:73:c5:37:ef:20:df:c8:9a:f7:94:25:9f:
96:1c:0c:86:35:fb:6a:e0:60:6b:8a:cf:51:42:e3:8a:15:c2:
f3:59:5d:f8:84:64:dc:6c:c8:8e:71:24:4e:41:a9:29:c1:48:
f9:a8:fc:c2:f3:66:cf:07:be:82:6a:64:53:99:3d:50:37:4e:
35:9d:7d:98:1a:9e:a6:53:bc:4e:d1:88:08:3d:1b:1e:dd:c5:
97:2b:e4:98:17:5f:dd:5a:bd:8c:0f:4e:e9:88:ac:ac:c5:21:
64:07:a9:06:b7:1b:7e:ae:47:fd:37:10:f8:74:23:26:73:6d:
18:83:4b:87:64:52:bd:84:6c:df:f8:1b:77:88:05:0c:af:bc:
0e:81:6f:bd:20:17:ad:8b:bc:9b:49:55:2d:19:99:07:ef:44:
ed:16:57:b6:ce:2d:f4:96:d5:23:49:fa:4d:a5:45:32:01:0a:
d4:f0:39:f7:e8:e4:74:fb:3b:40:53:04:1f:92:be:14:f7:42:
c5:9e:1d:79:fc:f5:c5:71:83:9e:a8:d7:0b:79:3b:9d:ed:87:
c2:db:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:28 2025 by rpki-client