Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: ZiVWYBNGpWXWhCD+2lNVhPOofCkgu59qt5C5cFzj544=
Subject key identifier: C1:9E:0D:BA:9A:CA:6C:30:0E:0D:F4:2F:5C:1B:0E:88:9D:0C:2B:32
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 0197B88EB0A0B54B33EB025A1317EBED47D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 056E
Signing time: Sat 28 Jun 2025 22:00:48 +0000
Manifest this update: Sat 28 Jun 2025 22:00:48 +0000
Manifest next update: Sun 29 Jun 2025 22:00:48 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: hrt7VDc8x33pSyPLQqfBMqaQ6V1un8o3Mip9+33R54Y=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b0:a0:b5:4b:33:eb:02:5a:13:17:eb:ed:47:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Jun 28 22:00:48 2025 GMT
Not After : Jun 29 22:00:48 2025 GMT
Subject: CN=c19e0dba9aca6c300e0df42f5c1b0e889d0c2b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:09:02:60:7d:28:ca:12:c2:57:64:bd:94:
c4:23:c1:a6:89:73:24:c6:9c:d5:f2:fe:6b:ea:8c:
87:aa:99:df:3d:fc:44:22:36:c1:4b:96:30:03:60:
db:05:46:cf:ff:2c:a1:b8:b1:07:76:ae:ce:58:aa:
c8:fd:6b:c0:c8:fe:0e:24:8e:01:31:61:b4:28:d6:
f6:7b:0a:68:a7:4f:07:f5:dc:20:56:a5:7f:89:53:
d9:fa:26:ee:ac:8c:e0:35:64:52:60:59:18:4e:61:
59:7b:9f:a7:75:0f:30:af:c9:8f:e5:54:bf:f1:a6:
10:54:b3:ec:b7:94:e5:a6:0e:4e:dc:98:8f:61:ac:
d2:da:ab:17:06:d8:c2:af:a6:75:52:5c:bb:5a:c3:
6c:fb:de:0f:b7:71:78:17:a4:35:ef:fa:da:29:a4:
d3:07:66:98:9c:06:ec:79:65:ea:75:79:bd:16:94:
4c:47:c5:98:0b:72:7e:b0:be:19:c2:7c:ce:32:b9:
4b:37:37:0d:93:cb:d1:a4:6d:bb:a2:9f:30:86:04:
1b:a8:38:74:58:03:85:3c:39:75:4a:8d:e3:eb:cb:
3c:9f:f6:5d:b0:4b:18:ba:34:a5:f9:a6:8f:14:d4:
56:a4:e8:be:e8:4a:fd:3c:06:1c:86:0f:9f:58:81:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:0D:BA:9A:CA:6C:30:0E:0D:F4:2F:5C:1B:0E:88:9D:0C:2B:32
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:eb:95:73:35:cf:66:34:68:3d:d3:f3:08:c3:f6:39:5e:3f:
3d:7d:ac:2b:87:de:e2:21:95:31:f0:40:60:a8:a3:84:c5:27:
04:9c:b5:98:b5:14:63:7d:ff:5f:98:ea:e5:d7:97:3e:6b:ea:
88:2b:bf:e8:8c:c5:a4:09:5c:6e:54:df:03:ed:38:0c:0c:81:
99:ae:1d:fd:f9:4e:b6:2d:b2:79:69:a4:3a:b2:66:8a:38:3c:
9f:a5:19:c1:c0:f7:ba:18:e4:5c:4b:72:7f:fd:00:39:2b:90:
b6:a9:fa:44:13:7b:58:15:b9:e8:c1:1e:0b:a6:51:62:1d:c2:
b3:1c:2c:3c:07:80:3d:a2:ca:37:73:74:47:76:76:a7:d9:02:
e5:32:31:78:83:06:f3:13:ec:bb:20:7e:e6:c0:94:c2:9b:45:
dc:67:b9:69:f5:04:e4:42:88:58:4a:cb:0a:58:2d:fd:9e:29:
70:68:c9:d4:8c:d6:a5:a0:cc:22:98:28:8d:b6:4b:53:57:a9:
63:05:fa:3c:7b:a1:36:6a:5f:68:aa:78:a6:91:59:b8:15:e7:
42:30:58:c6:0c:af:05:cf:02:99:d2:6b:55:48:eb:e9:d2:20:
14:dd:2c:d1:f0:33:86:fb:6c:96:40:cd:48:2b:51:84:6b:13:
fd:0f:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:22:42 2025 by rpki-client