Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: kysR9hBgFsHKMASXi/cjvEWowItjwEKV39y6jwdul8s=
Subject key identifier: 51:05:02:C8:C5:D1:E9:5A:E3:04:40:24:D1:2D:0F:FE:85:CB:7A:F2
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01976A0598AE99AF0E9AFD6DE87A96E620D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1024
Signing time: Fri 13 Jun 2025 16:00:40 +0000
Manifest this update: Fri 13 Jun 2025 16:00:40 +0000
Manifest next update: Sat 14 Jun 2025 16:00:40 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: HW+AR/muHKVhRleFItmsPGOmp3FTW1mfo46drqWONHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:98:ae:99:af:0e:9a:fd:6d:e8:7a:96:e6:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jun 13 16:00:40 2025 GMT
Not After : Jun 14 16:00:40 2025 GMT
Subject: CN=510502c8c5d1e95ae3044024d12d0ffe85cb7af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:06:23:fe:4c:d3:56:c1:3d:9e:28:9d:1e:
f6:cd:67:fd:2d:6e:15:eb:eb:57:76:2c:50:e6:63:
58:d8:38:dc:6c:db:1c:86:32:2d:b6:2a:3c:02:b3:
62:1e:0c:34:9b:29:2e:db:f8:2f:45:86:ca:5a:70:
db:e2:df:71:ba:7f:e6:0d:d8:c9:7e:c9:b1:a4:48:
e7:70:bf:a8:48:ce:d7:fd:d0:a1:40:e7:d9:97:2f:
72:a0:30:43:a1:e3:27:f5:81:74:f0:fa:15:95:c7:
bb:5a:12:38:44:46:96:e3:75:68:f6:fe:3f:e9:e0:
4a:88:07:db:c4:8d:a1:84:11:e8:91:fc:6b:df:1b:
4d:50:65:94:b9:89:46:8c:c5:a3:ef:3c:8f:4d:40:
71:45:9a:21:14:d8:08:d0:5d:4e:87:b2:e0:30:39:
2a:10:39:ae:39:ae:45:70:92:28:be:59:99:e7:56:
91:81:51:78:ff:cc:5b:58:2e:e9:bc:dc:5b:c5:ab:
c4:a9:ef:95:a1:62:36:2c:4c:89:1c:a9:0e:ad:2f:
18:cb:86:93:25:06:51:03:51:0a:44:26:f1:84:35:
87:66:14:b2:94:18:ff:9e:ab:da:f8:ca:96:7f:c2:
c6:0f:9e:84:f4:f4:25:f0:61:2c:02:c9:6b:99:ce:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:02:C8:C5:D1:E9:5A:E3:04:40:24:D1:2D:0F:FE:85:CB:7A:F2
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9c:6c:32:b9:5a:b3:67:5e:c4:9a:67:5d:bb:c2:bc:19:16:
7c:d0:41:13:e2:04:26:7a:22:08:4a:db:11:8d:99:5f:ce:ba:
ac:7b:3d:4b:c6:2d:15:84:69:df:1d:6b:3a:e4:e1:54:90:fb:
cf:61:f8:85:1a:b9:2d:9c:13:e3:5a:b1:a5:28:02:8d:13:4c:
7f:f1:77:ea:c6:0a:5b:d9:eb:67:5d:31:13:eb:3e:51:a7:24:
6a:25:63:8b:7f:0b:11:07:c7:a2:b5:e8:32:b7:1d:3e:a4:69:
4b:92:9f:64:32:de:4a:d9:90:52:74:d2:7c:79:67:92:57:01:
54:68:17:44:19:a4:6c:b4:07:9e:7b:b5:93:8f:e4:f4:87:f0:
3d:15:19:d8:35:2e:6b:1d:c2:96:a1:d1:81:21:32:57:71:9c:
5b:ec:b3:fb:4b:a3:7a:b6:a4:a6:1a:b0:1f:b1:8e:b0:cd:b4:
2e:e5:3c:a7:c3:5e:c9:84:7c:97:5c:07:00:94:11:2e:4e:6d:
d4:14:01:b4:1b:7c:5a:e3:34:32:b3:b2:a6:6e:3b:8c:f3:47:
da:48:46:7d:fd:42:e7:14:fa:64:2b:0c:51:82:db:b1:79:8b:
82:eb:96:e4:25:ea:90:3d:68:78:b1:8b:14:86:0b:49:c4:5a:
3f:2f:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:09 2025 by rpki-client