Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: McdqMkUwCkVk4Cj3m20IqFLZM2pIrwz7VAwN1YS6g/A=
Subject key identifier: A1:CA:43:56:93:AB:69:D2:3E:0F:CF:28:13:C6:A6:5E:59:E4:43:51
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 0197B7B3077AB34C85AE3E9C6982B7F8FD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 13D8
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: jr2r3w+j40FotO8JVvB/ccrSEquh8J3G3OZ+FFay5W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:07:7a:b3:4c:85:ae:3e:9c:69:82:b7:f8:fd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=a1ca435693ab69d23e0fcf2813c6a65e59e44351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:9f:bd:d7:7d:d0:07:44:3d:4e:bf:52:db:
d8:bb:b9:17:84:fd:96:50:86:d5:57:33:2c:85:55:
13:bf:42:58:91:ed:58:7f:17:06:da:3f:fa:6e:74:
35:fd:79:b3:d3:54:f4:f8:31:e1:60:13:f1:18:24:
be:e7:d0:c3:32:0c:78:ed:ac:91:fc:06:25:15:9e:
4e:7e:b6:d9:dd:07:d3:9a:93:e5:d6:5b:c8:a0:27:
20:a1:f4:35:89:4c:12:05:5f:af:b7:1b:14:02:f0:
e3:9c:40:05:fe:59:57:53:a9:05:15:23:fc:a5:1d:
28:83:39:cb:e0:78:4d:fa:f4:23:d3:95:bd:71:3b:
75:8d:a2:af:f8:c7:84:d6:b0:c1:3e:fe:9d:24:35:
e1:54:0b:a8:79:83:59:f1:2e:e0:39:65:32:42:c6:
ed:0c:26:3a:ee:c7:1e:16:69:4a:9b:90:59:bb:f2:
44:70:c9:7d:56:63:ab:53:b8:f0:fd:54:04:21:ea:
d5:4e:3b:c6:7d:c3:06:9e:d9:9f:13:ff:2f:74:1b:
8b:84:12:4c:50:4e:da:43:f4:ac:a3:67:a1:ca:4a:
f1:75:54:09:13:a7:b0:c2:1f:0f:26:00:71:4e:ed:
ac:7b:d4:c3:7f:46:04:c7:c3:3f:f2:9a:65:d3:e4:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:43:56:93:AB:69:D2:3E:0F:CF:28:13:C6:A6:5E:59:E4:43:51
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:f8:c1:3e:0e:c2:3a:d0:29:2a:e4:3f:1d:2b:b8:a2:64:
db:96:df:20:84:51:93:3c:3a:9a:76:91:91:8f:5e:a0:1b:1c:
25:4c:8f:d6:f2:d8:1b:64:d0:94:5f:92:75:4f:38:5e:94:37:
c9:a3:da:c9:74:ce:66:c7:84:eb:50:33:ba:a5:f5:14:90:82:
2a:0c:6b:ea:df:88:55:28:99:72:1e:d0:05:da:f1:65:a6:98:
f9:e1:e8:50:98:ed:b9:61:06:db:2b:a8:a5:03:7c:ec:fb:13:
f5:3b:b3:0b:29:9e:0d:35:ac:93:58:64:53:af:ee:a2:6c:f1:
c9:39:81:22:cb:fb:de:81:f3:9a:45:44:c9:92:7e:fd:f1:40:
61:f9:32:61:36:67:3e:b3:43:b2:79:53:3f:50:20:ad:85:a2:
f3:f4:21:1a:f7:e1:6a:15:f2:3f:54:f8:9d:e9:15:15:c9:bb:
70:80:c6:f6:1b:7a:34:a2:91:9f:1d:56:5d:56:fa:34:a7:75:
4e:6a:6b:8a:a2:f0:17:2e:75:ad:3b:91:0c:a2:f9:8d:dc:56:
80:eb:60:7e:57:8e:e9:19:3c:3e:78:a8:a0:57:46:7d:7e:47:
5f:c9:65:4b:ea:33:fb:da:4f:e3:7a:24:a8:73:da:b5:86:ec:
87:eb:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:05 2025 by rpki-client