Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: 7cERyzT5cZn83UsNLpXbEIAidikhlX2OzkivLbEYC28=
Subject key identifier: 25:8D:3C:D5:23:FD:6F:D5:C6:08:E8:63:6B:F4:BA:4B:67:25:31:97
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 0197B70E6793D7109757866B8AB4FF458CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0EF4
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: qbj3EuPk+yk2dqnpcaNns7x3QTvG+NNG2Jxx+jLU4pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:67:93:d7:10:97:57:86:6b:8a:b4:ff:45:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=258d3cd523fd6fd5c608e8636bf4ba4b67253197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:0d:62:49:33:bb:eb:83:95:0d:59:ad:03:
e3:0b:4b:93:22:f0:27:5e:aa:9e:d7:38:c5:ea:3e:
91:55:67:e1:a3:47:ca:74:ca:84:99:46:5d:b9:44:
02:ad:ad:01:32:f8:b4:1f:6c:02:34:a4:5a:a1:c4:
6e:f0:80:3f:f4:9d:dc:d5:f2:35:19:38:58:28:cd:
31:bc:b5:5e:d8:10:59:b6:15:68:be:ba:a0:ab:5c:
39:01:6e:06:da:6a:0c:c6:14:36:7a:1f:a2:4f:95:
cb:3e:5b:11:79:11:60:43:04:c9:78:2d:21:ac:36:
e4:be:c4:95:da:77:8b:a0:64:a9:6b:01:a1:11:55:
81:23:6b:f2:d6:fb:0b:24:8b:9d:53:35:ac:06:d1:
7d:3e:57:61:35:d7:c6:26:ad:c3:2d:24:3c:22:38:
93:1c:95:43:72:d8:21:39:77:4b:ff:1f:d8:cf:3e:
4d:6f:23:9b:4b:34:59:32:a0:05:64:5b:89:e0:3e:
6a:ea:df:d0:75:4a:8b:a0:c0:f0:c5:11:93:d1:f8:
51:81:99:2e:ef:99:f1:3c:9a:de:8d:aa:2e:01:4d:
a4:fe:26:15:13:fe:fb:44:34:20:6c:87:48:1c:cf:
ae:2f:ea:c9:f3:a0:2c:09:60:b3:b0:17:81:d9:c1:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:3C:D5:23:FD:6F:D5:C6:08:E8:63:6B:F4:BA:4B:67:25:31:97
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:1b:49:dc:1e:e3:dc:45:22:4d:ad:67:e9:86:e0:1d:9c:
f1:34:f0:c8:37:f0:22:a0:4e:4f:80:58:f7:32:9d:f0:f5:e3:
66:9c:4d:f9:9a:9b:28:bd:8f:f0:97:f5:3b:cf:74:1c:f4:73:
26:e7:84:9e:b8:aa:e7:22:5c:f7:00:e2:b2:b3:76:3c:d2:b6:
93:3b:ce:b7:aa:12:ea:0d:f9:3d:01:85:e7:e3:59:77:7f:27:
44:4c:4e:78:ca:66:93:4f:2f:fd:94:c1:a0:d3:b2:07:25:d1:
6d:27:2e:77:a7:87:9e:e8:df:17:60:0a:03:cb:ac:ea:2d:f6:
37:33:7d:61:17:b6:ff:d6:0a:c2:c8:f1:56:76:b8:37:1e:d8:
f3:b0:ac:fe:bb:21:41:57:15:e2:1a:03:21:5b:fa:b7:64:98:
63:6c:eb:e0:c9:5f:2e:cd:3b:db:4c:bb:69:cf:c6:d1:52:5c:
06:ae:be:a4:83:5a:ce:26:86:8f:8c:0b:c5:f2:f7:f7:48:4f:
75:df:f5:33:52:0d:f4:4a:46:d0:ae:5f:25:92:e9:f1:64:46:
7d:93:56:b9:1c:54:32:1f:f3:df:cd:6e:a1:ee:e2:4f:97:d4:
5c:90:cf:60:2d:d4:f4:93:4f:5c:a9:60:86:21:1f:cc:83:3c:
55:f6:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:26 2025 by rpki-client