Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: /Ce4wb6kzHOnH+4QcI/qHJW6ak/8k6NvnAZ7FZtkb6k=
Subject key identifier: 59:F6:35:6B:75:04:FD:34:D7:AC:30:1C:6F:C5:14:7A:83:91:E3:A9
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019770E30E7E443D5BCFF472F21F3697217B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 09E4
Signing time: Sun 15 Jun 2025 00:00:17 +0000
Manifest this update: Sun 15 Jun 2025 00:00:17 +0000
Manifest next update: Mon 16 Jun 2025 00:00:17 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: DGy3c9WDay/63ztn6AnnHTolcLuY3Cq6dEupIVnJ18M=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:0e:7e:44:3d:5b:cf:f4:72:f2:1f:36:97:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jun 15 00:00:17 2025 GMT
Not After : Jun 16 00:00:17 2025 GMT
Subject: CN=59f6356b7504fd34d7ac301c6fc5147a8391e3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:13:b6:30:4b:95:f8:dd:4c:6e:83:b1:e6:
5d:4a:74:75:85:84:86:49:a9:e7:77:38:ba:29:03:
f0:cd:d4:7d:91:ab:98:be:84:0d:20:eb:3c:f7:f5:
76:84:a2:ef:34:e2:36:63:52:13:cd:81:76:a0:08:
c1:66:da:bb:d5:7c:35:ad:c7:39:da:fa:00:67:8b:
ec:5e:89:a3:cf:fe:5b:d5:1a:8a:73:a0:9f:51:9d:
f9:c4:c1:cd:ee:33:d4:85:06:28:f4:b9:24:ec:ec:
d1:a1:df:3a:3b:87:d9:89:96:6f:cc:b9:4b:13:79:
22:44:00:e2:36:00:93:e0:fb:2c:d4:e1:00:db:8f:
0d:9f:eb:8e:68:a8:c5:eb:18:9d:96:1e:2a:4b:86:
02:19:81:de:1f:bf:69:20:0e:a8:2a:ff:30:cd:97:
07:57:98:86:ba:15:74:66:7e:88:f8:fd:9d:e0:09:
b5:c4:2b:0f:e3:db:6e:b3:d3:24:92:f6:41:08:a4:
50:4c:da:64:70:19:b9:b6:a2:02:c2:6c:c1:b7:e7:
22:eb:66:75:54:60:48:b1:9a:c8:96:6b:e1:1d:c0:
5a:58:2e:03:97:fd:70:be:22:25:fb:e4:65:f9:0b:
8d:d1:f4:ea:a5:0b:dd:57:31:e6:46:c4:f5:83:a0:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:35:6B:75:04:FD:34:D7:AC:30:1C:6F:C5:14:7A:83:91:E3:A9
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ee:fb:be:e0:2e:a6:9f:4a:dd:b6:03:15:89:59:df:e3:a9:
94:8a:a3:ad:ae:cb:9d:95:18:73:13:45:24:84:ee:1a:3d:29:
f2:2c:46:d8:2e:ae:73:3c:e3:fa:35:e4:15:32:da:82:50:b7:
05:af:fa:9a:a2:da:19:e4:67:bc:4d:82:b0:71:9e:f2:45:4e:
9e:2a:36:ff:b8:c8:88:bf:56:d0:e7:63:94:9b:ac:6b:e2:32:
9e:be:39:32:80:61:00:c2:9e:72:5d:bc:b2:c5:ea:39:07:a2:
13:56:74:01:de:4f:b3:cf:40:fc:9b:79:95:13:96:7f:68:74:
95:12:04:66:9c:5d:c5:15:f8:3e:0e:9a:cb:f0:bd:91:4d:97:
19:74:4d:3f:3a:f4:f4:8a:13:b6:74:27:09:ab:1d:99:ce:12:
d4:b9:1d:49:2a:d9:a1:f2:90:26:a8:8a:79:42:38:12:07:e4:
c4:82:73:e1:6d:99:67:80:f4:60:18:61:b6:b0:6b:59:56:ed:
55:c5:01:61:3b:90:95:c7:03:ab:cc:44:d1:9d:63:2d:c8:d9:
e0:18:78:d8:04:cd:06:58:b1:40:3d:44:d0:80:b7:e6:cf:50:
f4:f4:c5:ff:b6:7a:d6:e3:32:0b:5e:e9:80:53:0f:14:51:23:
82:26:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:50 2025 by rpki-client