
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: 5vpB2baC+IaPoAOjNoa4gpjgKdr2nYjFl4P3OFcHOwI=
Subject key identifier: D1:37:07:E5:8F:EA:A6:D7:A6:E6:47:85:E4:7C:42:38:AE:51:ED:85
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 0197B58DD372351B3DF9033BD080DAD91211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 0524
Signing time: Sat 28 Jun 2025 08:01:00 +0000
Manifest this update: Sat 28 Jun 2025 08:01:00 +0000
Manifest next update: Sun 29 Jun 2025 08:01:00 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: hZ7e4jl6F070sLzxxD5rhzQJ/XdcSUrX2HypJzasTgI=)
2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:d3:72:35:1b:3d:f9:03:3b:d0:80:da:d9:12:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Jun 28 08:01:00 2025 GMT
Not After : Jun 29 08:01:00 2025 GMT
Subject: CN=d13707e58feaa6d7a6e64785e47c4238ae51ed85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:2a:d0:b2:5f:cf:fb:df:7d:e5:24:2f:81:
74:10:47:18:73:56:38:5e:01:0c:38:57:0a:19:87:
24:b4:f0:77:8c:5f:be:ba:95:59:16:31:97:4c:8d:
05:f9:22:d2:e3:99:1b:7c:93:28:ca:8c:7c:e2:d7:
50:33:07:95:6d:f0:5b:db:c5:61:3c:3b:fd:dc:b8:
4b:7c:a3:9c:dc:d3:3d:1a:fb:93:38:21:96:60:36:
18:ac:bf:d3:8f:b2:ec:92:7c:05:8b:36:aa:f6:2a:
b9:65:aa:2b:42:4c:c5:f0:15:48:80:86:00:89:6f:
fc:51:af:61:5d:62:0e:24:f7:aa:c6:31:7d:92:8d:
cf:fa:bb:b6:c8:12:38:64:91:6a:c0:3f:8f:28:ec:
f4:93:4a:fd:96:bb:ff:88:92:d5:57:fb:7a:f9:5d:
72:37:49:76:64:bf:59:ae:bb:be:4a:52:80:a4:9a:
a6:23:a7:7c:5f:26:1d:1d:88:81:3b:8c:11:ee:7e:
67:70:d1:2a:8a:8c:b3:79:7e:f4:e8:b8:02:6c:ba:
18:39:63:66:88:51:e8:11:52:8c:5e:f5:65:b1:03:
42:5c:6a:c4:06:16:35:40:73:c5:1e:eb:9f:3a:e7:
8a:fe:8f:3e:a6:49:bb:1f:3c:6f:78:52:cc:69:40:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:07:E5:8F:EA:A6:D7:A6:E6:47:85:E4:7C:42:38:AE:51:ED:85
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ab:58:f1:09:e9:c2:07:97:5f:20:bb:e1:d1:39:2a:bd:5b:
2c:90:8e:60:9e:9c:d8:4d:86:39:2e:4d:92:50:7b:18:a4:a3:
a9:b6:7c:59:f0:e7:79:a9:e1:5e:c8:24:e5:13:40:e6:ec:84:
78:e6:df:be:80:32:79:22:75:ab:a2:d7:46:aa:d1:d2:e6:03:
93:b5:cb:ec:b3:e5:a8:d9:2a:f0:d8:7c:9e:4f:b0:67:f7:59:
81:86:05:1e:8c:ad:e7:87:b1:57:00:4b:78:1c:10:6e:70:35:
31:0a:8d:64:f5:a9:a9:df:72:92:6b:9f:ae:18:09:32:56:7f:
02:4d:ad:37:72:c9:da:6f:19:25:9d:28:70:d5:0f:88:6c:8d:
89:ec:fb:d2:7e:79:62:5e:a8:bf:50:43:ad:32:68:7c:01:00:
ba:19:b1:b7:d5:1c:23:68:02:c4:32:64:2f:46:d2:e1:62:24:
98:4f:dd:05:c5:68:0a:da:4a:6d:64:94:b9:55:ae:0d:10:03:
d0:b2:94:c6:2f:79:3f:57:59:c0:a5:4a:b7:34:92:66:70:73:
42:e2:54:22:a0:c0:f6:66:88:aa:bf:8e:18:ba:38:d1:f7:0a:
d8:1b:48:5c:1c:ab:e7:cc:07:cc:c7:ae:7f:78:73:d7:84:f5:
69:ae:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:52 2025 by rpki-client