Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: x4SZb1FMZ2ow8+oqXdJCZAC6w4Xvz35Z3a09wy48mfM=
Subject key identifier: 35:02:0B:10:68:A0:54:0F:4B:93:EB:52:63:CA:D0:BA:BF:2E:6E:5C
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 0197B6A122E2F183009D764CC9CA587F10FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 1322
Signing time: Sat 28 Jun 2025 13:01:42 +0000
Manifest this update: Sat 28 Jun 2025 13:01:42 +0000
Manifest next update: Sun 29 Jun 2025 13:01:42 +0000
Files and hashes: 1: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (hash: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=)
2: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (hash: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=)
3: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: A+kJijVHJeJBIrs/V+By8/ejeYsht1vCmPcAwRxE2G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:22:e2:f1:83:00:9d:76:4c:c9:ca:58:7f:10:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Jun 28 13:01:42 2025 GMT
Not After : Jun 29 13:01:42 2025 GMT
Subject: CN=35020b1068a0540f4b93eb5263cad0babf2e6e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:02:15:f6:b5:ab:a6:4a:db:5a:cd:fe:f1:
af:de:a7:d2:f6:05:8d:39:e6:93:8b:d4:f5:9b:4c:
3a:02:dd:a7:16:00:ff:bf:0b:15:a7:d4:de:86:1f:
80:0c:db:f9:05:6f:bc:70:d5:98:c9:11:7f:87:1d:
35:92:82:88:58:c0:28:a3:6d:fd:5d:fb:e2:bd:25:
92:3a:78:fe:ae:3b:ae:f9:3c:e6:6a:6c:5e:d9:27:
7d:5c:50:77:1f:15:c2:13:d4:bc:97:30:49:b6:3f:
7b:be:fd:13:1a:e4:1b:29:31:97:26:a6:42:ef:b1:
1d:66:d7:c8:bd:f5:e4:6e:7b:8e:9b:aa:55:fb:67:
d0:50:99:bf:99:fc:92:d8:84:37:65:39:65:51:1c:
4d:d6:e2:52:47:05:64:38:e4:f5:50:4c:cc:e5:dd:
4e:0a:6f:30:7d:7b:5a:82:a8:1a:d2:99:8d:42:ad:
b8:c0:bb:c1:da:cf:f7:e8:57:a6:8d:99:79:95:14:
43:84:d5:2d:ce:1a:79:bd:ed:cf:20:4b:39:f7:65:
ac:79:35:b2:a8:7f:82:c4:6a:ca:64:2e:fd:08:fc:
4d:d7:c0:b4:6d:00:4f:1f:d9:a3:fa:2d:e2:73:05:
02:56:97:b7:17:6c:6c:d5:55:63:94:1f:93:64:44:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:0B:10:68:A0:54:0F:4B:93:EB:52:63:CA:D0:BA:BF:2E:6E:5C
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:12:da:08:e3:2e:d3:8c:c4:4b:ce:cf:d6:25:1e:45:c4:a0:
d9:58:21:8d:e4:a1:32:d4:47:94:08:ab:42:a1:99:a0:90:4a:
8c:4b:3b:74:b1:26:46:e1:7a:8b:c6:33:19:21:2c:b3:b9:a1:
7a:80:b5:be:db:f3:00:5c:c5:d7:e4:bf:7c:34:cd:b5:c8:65:
39:b6:0b:07:06:fc:77:91:99:98:08:f0:f3:60:86:57:ba:39:
9e:5a:1d:23:3d:5f:69:a6:d6:17:e1:30:79:a2:11:96:e6:80:
8d:b9:09:bf:77:66:90:5d:51:2e:cb:17:14:5c:fa:32:30:26:
7b:69:60:81:c3:aa:db:ae:6f:9c:c4:08:01:28:98:4f:72:c0:
46:2f:4b:3c:87:4f:c6:27:88:c9:7e:fe:5a:fb:20:0f:94:46:
ce:9a:65:03:8a:8e:57:69:62:fa:bd:9c:ef:60:f9:a5:f2:e1:
cf:8c:43:79:14:e8:bd:fa:5e:7c:bf:f9:35:39:44:6c:28:c6:
e4:79:db:48:60:ab:18:21:9c:4a:de:3d:61:c9:2a:31:cb:dc:
b6:ad:bd:8e:bc:4c:06:47:80:f2:e8:d1:7b:2e:06:da:7d:cb:
a4:86:c4:0f:55:36:07:d8:5e:bc:15:13:f9:26:80:d8:20:73:
ee:bd:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:42 2025 by rpki-client