Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: PyHamsWABIgFMdAOYDDPSKIXi0XHE1Vacwn6iiablUg=
Subject key identifier: 83:7D:0E:22:2F:0A:98:99:A3:ED:DD:19:1F:BF:F7:A4:17:7D:84:E1
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 0197B632E8D80C51BEB7770199A8B0DB410D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 2D
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: +NuWi7CK4vyBG60x0hSXHE5mqhfboixdW0JjbP2Kf+s=)
2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e8:d8:0c:51:be:b7:77:01:99:a8:b0:db:41:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=837d0e222f0a9899a3eddd191fbff7a4177d84e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:fa:26:ae:ce:ed:58:08:e7:2a:54:eb:0b:
8f:5c:1b:32:ce:97:39:c4:6a:40:a0:ae:b5:83:eb:
a6:95:49:29:9d:c5:57:47:12:5a:9f:1d:00:79:57:
eb:02:a0:09:28:b6:f3:ea:7b:11:9f:9d:e3:8d:5e:
ba:1f:dc:37:4d:f3:50:a3:af:d5:f9:44:7c:20:05:
07:36:33:c3:1e:a7:4c:22:50:c4:56:6c:33:09:21:
f5:b9:8f:18:1c:36:de:fa:6f:f8:0f:9b:fc:1c:65:
e6:54:51:9a:45:a5:f9:c6:b3:7f:7f:70:f5:82:71:
d9:9c:8d:90:40:e2:c1:36:d9:95:f9:c8:e9:3c:a4:
5e:9c:ed:65:53:f8:ad:5f:0a:ef:09:fc:38:a4:61:
06:33:79:62:3f:68:5d:ee:e5:f7:bc:dc:54:dc:f3:
82:35:e2:1d:65:f1:b7:bc:bc:c6:83:59:5a:5e:9d:
b5:83:79:dc:9b:b6:1a:95:dd:5e:c4:d8:fc:e6:54:
52:9c:af:67:9f:1b:92:7b:c4:96:fe:8e:0f:23:33:
e1:8c:3b:b5:ba:6e:d7:0a:7c:17:cd:0e:7b:ca:8c:
33:ee:b0:e8:5c:f3:24:e1:ac:98:74:85:fe:36:ed:
db:14:20:67:8d:df:1c:7e:88:20:db:bb:7d:91:24:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:0E:22:2F:0A:98:99:A3:ED:DD:19:1F:BF:F7:A4:17:7D:84:E1
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e8:9c:99:70:48:a5:1f:f2:29:6d:e4:02:d4:52:13:73:e0:
3a:98:61:2d:cf:ac:ca:96:3a:fc:94:bd:07:90:5b:6d:92:31:
7f:66:b3:d4:3f:6a:57:63:d5:36:02:5a:a4:8f:cd:a5:3c:d1:
b5:ab:a3:64:6c:79:8a:a5:43:93:f1:49:ad:6b:bb:01:2d:41:
74:5f:eb:5c:f5:6d:13:ed:20:c4:b3:52:b1:14:56:23:b2:eb:
9f:af:ef:73:62:ed:b3:21:4e:29:41:fa:09:ff:f5:d9:c4:1f:
ec:15:1d:11:4f:78:ed:61:21:2a:90:9c:77:ed:06:23:e8:bc:
f0:28:46:cb:05:a8:98:b9:93:44:ad:dd:90:76:43:ad:0e:17:
a4:e8:f1:20:c3:45:b9:39:3c:99:c9:f8:b1:af:6c:71:81:bc:
d2:dc:a3:f8:46:82:5c:c8:6f:29:c3:94:9b:29:ac:39:4a:49:
9c:69:9c:c4:2d:bd:a7:95:38:07:00:44:0b:63:5d:f8:fb:fd:
f5:a9:c6:21:57:51:64:b9:a5:3c:5b:fd:0d:f2:3c:c7:d3:e1:
08:f6:4f:eb:0f:33:5e:36:53:f4:8a:2f:a7:99:b0:59:f9:f7:
aa:e9:f0:f0:ae:37:4d:da:77:39:19:12:6d:61:1f:28:4d:98:
94:77:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:17 2025 by rpki-client