Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: 4r75LBJp+YYG8o8tKZq2+iKnyMgtx66sHx/IFrIYs4o=
Subject key identifier: D8:52:5E:B3:3D:E3:1E:00:53:9B:AF:BF:8B:71:CD:94:39:5E:C9:CE
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 0197B8FCD5C8F5BCEE86710FE8F09D4A46E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 033F
Signing time: Sun 29 Jun 2025 00:01:06 +0000
Manifest this update: Sun 29 Jun 2025 00:01:06 +0000
Manifest next update: Mon 30 Jun 2025 00:01:06 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: 0Y11jPChkf4ayGpn0hX1iPQmKHgU5eGBY9/qsgE0J4w=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d5:c8:f5:bc:ee:86:71:0f:e8:f0:9d:4a:46:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Jun 29 00:01:06 2025 GMT
Not After : Jun 30 00:01:06 2025 GMT
Subject: CN=d8525eb33de31e00539bafbf8b71cd94395ec9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:ed:cf:53:79:4c:0b:23:54:c7:88:d5:59:
9f:8c:79:3b:50:be:e5:16:42:e5:29:90:ab:04:ca:
0e:82:d6:09:63:21:fa:26:bf:48:62:25:9b:8e:3f:
ba:53:7b:55:ec:a6:3e:de:fb:89:0d:49:0a:66:ea:
48:1a:8b:c4:3f:47:ed:73:db:b1:bc:16:1b:7c:ed:
74:4a:40:55:c0:40:e4:69:59:da:5d:fa:0d:9c:42:
22:78:06:b8:8b:c1:d0:5a:58:4f:b2:b3:5a:55:42:
9e:78:2f:d4:bf:63:db:dd:69:07:3d:fc:32:57:4b:
ae:b7:4c:bd:a6:81:87:d5:d0:f5:02:6e:82:e3:ed:
b6:15:37:58:38:14:a8:b1:9e:d9:97:54:98:dc:07:
be:63:8f:81:29:07:10:5e:05:1f:fc:9e:52:2e:cc:
e9:56:5b:68:5e:90:d6:18:ee:39:15:e2:7b:37:e2:
e4:04:22:7d:d9:f0:6a:82:5b:a0:67:60:92:60:e4:
43:df:1d:7e:30:c5:8e:b0:af:98:4e:2e:27:bf:f5:
51:93:9f:20:d7:28:bf:21:67:8d:1c:74:a5:43:e9:
b5:0c:3a:24:4e:e3:c6:ae:4e:90:f0:60:e9:04:2c:
95:73:46:bb:16:55:60:80:ae:93:cf:fc:03:62:55:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:52:5E:B3:3D:E3:1E:00:53:9B:AF:BF:8B:71:CD:94:39:5E:C9:CE
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:f3:53:9c:c2:a1:17:51:5f:44:f6:c5:7d:48:2f:18:f3:
b7:c7:f5:8d:3f:10:ae:2f:36:5c:d9:55:56:f8:98:01:3f:52:
e8:1c:fd:9c:f4:22:00:4a:e5:bf:b7:a1:cf:d5:f3:9a:9e:c6:
5a:ec:3e:cd:dc:91:ec:63:0b:28:d7:72:81:f4:0b:c1:f1:45:
5d:17:df:28:c4:a8:8a:f2:82:18:ce:a7:f1:b5:10:57:30:ee:
d3:8e:7b:54:b1:c9:3a:9c:05:89:5c:2e:9d:13:0e:3c:55:cd:
51:aa:53:fd:a4:fa:b6:a8:3f:08:0a:78:6f:77:d3:9f:0e:8a:
48:7d:72:ce:eb:41:3b:51:3c:6a:53:60:a4:84:b1:6b:51:f1:
c9:fd:4e:8c:77:88:51:cc:89:63:e5:ec:d2:89:2c:dc:85:fd:
cb:85:7d:cc:00:73:8c:07:d4:bd:01:a7:1d:b1:a1:8d:86:0a:
e6:97:11:bc:fc:fc:16:66:a9:ab:c8:af:9a:8e:dd:c2:ce:ed:
df:cd:6f:12:a9:f1:0b:29:92:35:62:71:0c:6e:44:8b:85:16:
f9:79:27:3e:56:74:02:f6:e0:d8:9f:74:9a:6d:3a:17:e7:4a:
ff:ab:f1:f7:ac:a0:84:ad:38:5a:de:3a:01:4d:4f:76:a0:74:
3c:29:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:39:08 2025 by rpki-client