Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: VpMH5LRhdxkFlDUcVFF7XIX3bV43GG7P8oo9XKhD29k=
Subject key identifier: 53:1D:A6:BE:A5:27:4A:CD:02:84:C8:1D:2B:34:E0:D5:C5:B3:5E:88
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 0197B7B332831312F7FCF7E37DB88BC1FC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:03 +0000
Manifest this update: Sat 28 Jun 2025 18:01:03 +0000
Manifest next update: Sun 29 Jun 2025 18:01:03 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: jHFuHS+FyoHzVqeiiWmq5VlBw+YrQYBOn9AxzURQwPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:32:83:13:12:f7:fc:f7:e3:7d:b8:8b:c1:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Jun 28 18:01:03 2025 GMT
Not After : Jun 29 18:01:03 2025 GMT
Subject: CN=531da6bea5274acd0284c81d2b34e0d5c5b35e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:1a:ae:1a:77:1d:bc:bf:74:f1:28:64:d7:
bc:d2:ef:ed:20:db:ed:7b:b1:2f:a6:34:a3:28:7b:
e2:31:3c:dd:b7:0e:6f:a2:bf:1e:7d:b2:b9:86:e3:
35:c8:b0:49:d9:88:cb:e5:98:63:4f:53:9c:94:54:
1a:9a:e6:1e:db:4f:41:a8:18:02:c6:8d:f0:6d:d3:
dd:3a:a4:b5:5a:bb:31:1e:b4:e4:7a:37:13:b6:6d:
de:07:e3:85:d7:4f:23:1f:27:c1:7b:4c:ac:b6:22:
b3:50:cb:ce:ae:5a:50:41:c2:d0:d3:71:89:ee:c9:
7f:08:8e:ee:52:90:7e:20:16:67:7c:dc:0a:e0:b5:
25:17:56:ac:69:5d:44:79:26:57:ed:d8:e8:0a:65:
76:ad:7e:56:fb:a0:7e:b1:9d:98:48:c9:50:56:8b:
96:b8:5b:00:9c:3a:f2:fd:b6:b8:1c:9d:47:c9:4d:
a6:c1:f6:e4:e0:00:d4:91:d2:10:86:7b:f1:79:2b:
38:90:04:53:0e:a1:05:3c:d1:72:8c:ae:80:e2:e6:
40:c7:12:4c:75:af:3e:4e:df:a2:ad:a7:e4:71:b0:
6f:91:8c:47:ed:fb:f2:bf:80:23:b6:17:c0:01:1b:
43:ec:d4:d1:56:34:50:56:6f:6b:d0:66:f6:2d:b5:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:A6:BE:A5:27:4A:CD:02:84:C8:1D:2B:34:E0:D5:C5:B3:5E:88
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:be:a8:4a:bb:fa:df:72:a0:ba:73:e3:75:82:ff:49:a0:87:
7b:26:c0:7d:28:fa:2f:98:b7:a0:9d:11:ed:b8:0a:b6:b9:d5:
6b:e4:de:51:77:c8:5e:84:6e:cc:a4:ec:0a:69:f6:b7:40:ba:
18:76:22:74:b6:c8:20:d5:89:82:7c:f8:6a:94:6d:e9:dc:01:
2c:a3:b7:ff:f5:2c:2e:fd:b8:1c:22:fa:60:9b:b7:66:c6:99:
2b:dc:6d:37:5e:a7:09:f7:72:39:e5:44:c9:1d:96:00:85:85:
09:2a:49:4a:3a:61:75:db:ef:79:9b:2e:b3:a3:d4:46:7a:02:
7b:e8:f2:47:30:62:7a:84:b9:3d:58:73:7f:c6:66:5a:fd:be:
1e:42:4a:ef:11:06:63:9d:d4:53:3a:51:be:87:15:a1:45:02:
75:f7:07:82:cf:86:f2:8d:c0:ce:d8:86:c0:67:b7:f4:51:27:
f6:81:12:f2:c1:f8:d3:d1:3d:da:9c:75:12:97:d7:87:86:97:
04:ec:85:de:82:7d:8e:9a:7b:c0:62:11:be:b6:70:af:af:66:
cb:fd:6d:65:e9:c2:2f:7a:58:92:97:95:d0:2f:4d:96:35:04:
90:d9:8f:d3:e8:cd:e8:73:3f:fb:32:75:5d:bc:83:ee:2b:57:
23:41:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:15 2025 by rpki-client