Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: 6a2paynrsVI3G7SBvFePpfncwDIDdEC70kXOOO2ddHo=
Subject key identifier: 59:6E:99:C8:3D:87:79:32:01:38:AF:D1:CF:5D:53:F0:82:17:2A:B1
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 0197B745040B530AED92A5BE781541C631A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 0F78
Signing time: Sat 28 Jun 2025 16:00:42 +0000
Manifest this update: Sat 28 Jun 2025 16:00:42 +0000
Manifest next update: Sun 29 Jun 2025 16:00:42 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: 5tRMtVqw75e2kRK/P8skNopzv2SC8yO5FUoFDScOJ1Q=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:04:0b:53:0a:ed:92:a5:be:78:15:41:c6:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jun 28 16:00:42 2025 GMT
Not After : Jun 29 16:00:42 2025 GMT
Subject: CN=596e99c83d8779320138afd1cf5d53f082172ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:af:df:da:1e:a0:63:24:7e:54:01:4e:28:
51:01:e8:38:cc:47:e9:8e:4f:ca:14:34:41:98:cf:
f2:56:92:f7:4f:2f:78:e3:14:63:d5:54:8c:4c:14:
2f:6d:66:4b:15:f2:be:cb:c8:d0:74:98:30:b8:3a:
9b:4a:1c:61:6b:b4:01:78:0d:b0:2f:61:d9:84:9f:
99:58:c4:88:a7:eb:d5:e4:9a:95:9b:21:a4:35:e4:
5c:61:dd:2b:d8:5d:25:2d:67:b5:2b:2f:b9:4a:ba:
8a:bf:73:74:25:9b:76:6d:f9:49:3c:8f:19:e8:d7:
5c:f7:8f:71:ea:8a:82:f1:e4:37:1c:3d:be:e4:7d:
35:c3:e7:ba:cc:4c:e6:19:81:59:c7:00:44:fb:7b:
40:25:04:36:45:e5:e3:be:5c:68:80:43:8c:c0:f8:
1d:3b:3b:15:3f:47:2b:ce:5b:5d:89:81:a7:07:06:
83:8c:d3:ff:95:10:93:1e:49:6c:ad:35:c5:20:c7:
72:38:86:9a:7e:39:bb:2e:ad:48:1d:fc:84:75:53:
42:70:ef:dd:bf:6d:b2:1e:c3:0f:60:d3:0e:23:9d:
e6:12:87:a6:a0:2a:9d:74:5b:3b:73:3b:54:52:4d:
a6:33:73:5d:76:63:23:19:d7:5b:ee:9b:ea:4f:1a:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6E:99:C8:3D:87:79:32:01:38:AF:D1:CF:5D:53:F0:82:17:2A:B1
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d4:b5:4d:df:c7:87:35:56:e9:f4:e0:10:9a:23:dd:64:82:
ef:32:69:ea:68:3c:50:64:8d:66:f1:46:4d:03:ad:af:71:16:
1d:d1:19:8f:75:cb:2f:15:66:7d:fe:dc:e3:ca:bc:dd:78:61:
b8:b6:66:7b:9a:c7:a3:fb:3c:45:8e:43:97:e8:f9:4a:9d:cb:
77:3c:56:98:d3:b3:b9:1e:99:23:f9:e6:a7:4e:a1:eb:cd:44:
92:85:74:db:eb:50:eb:f5:25:c5:4e:a4:1f:52:fb:fd:f5:ff:
7f:91:d6:bb:33:0c:b2:97:19:60:a0:fc:6a:d0:1e:14:a9:ff:
cf:78:63:6a:6c:7c:6c:04:39:ff:71:ff:83:a7:a1:3f:5d:0b:
e8:bd:08:a1:31:1c:6e:27:67:d7:87:cb:4c:7d:82:a5:6e:1d:
61:28:91:4e:dd:12:dc:3d:aa:be:6e:40:bd:99:11:f6:89:db:
1c:1f:e7:5d:59:4c:1f:32:c7:7c:e5:12:04:1f:67:cb:e7:04:
62:cd:4c:e9:22:b4:e8:6a:aa:f7:84:41:02:41:c6:62:e9:f0:
d1:a5:74:6c:79:10:de:85:01:13:3d:46:2a:37:d5:96:cc:80:
84:d8:07:78:3f:29:b7:27:7f:93:a2:42:92:05:25:f1:8c:7b:
e9:dd:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:03 2025 by rpki-client