Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: Cc9hGF6GNHz3MjK2M46f2M6mw4ALAH9L1Qllewn/85E=
Subject key identifier: 67:91:80:8B:6F:5B:55:D8:47:45:73:9C:92:90:62:64:6A:C2:F9:59
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 01987487320F926C6023C554A419E28190F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 0F25
Signing time: Mon 04 Aug 2025 10:01:13 +0000
Manifest this update: Mon 04 Aug 2025 10:01:13 +0000
Manifest next update: Tue 05 Aug 2025 10:01:13 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: imoIYZIGbeLmFK/ZXp9Hok8gYiL/IsFQvHaH2u5GzIE=)
2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:32:0f:92:6c:60:23:c5:54:a4:19:e2:81:90:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Aug 4 10:01:13 2025 GMT
Not After : Aug 5 10:01:13 2025 GMT
Subject: CN=6791808b6f5b55d84745739c929062646ac2f959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:bb:50:83:01:db:45:dd:49:80:e6:c7:65:
e1:8d:4c:28:aa:33:27:ee:79:da:ab:21:90:1c:32:
0c:0e:b1:c8:1d:80:aa:8f:f4:e7:32:6f:09:9d:87:
c4:38:e0:13:83:f8:f2:a8:13:cc:4d:05:72:0d:66:
1d:51:45:15:93:1b:6b:96:aa:b8:17:c5:ed:91:a5:
6d:52:de:e8:e2:ea:82:45:7e:3e:66:b2:49:dc:42:
16:49:27:48:7a:df:6d:d3:8f:80:eb:8e:69:ca:56:
6d:2d:24:d7:90:c5:33:47:7b:d2:ff:fd:37:ee:87:
96:b2:94:13:42:f4:ba:e3:8f:03:cb:89:d5:38:45:
6a:e5:ae:8b:6a:73:4f:6c:36:da:32:bd:d5:f8:12:
4f:08:69:45:0f:68:92:24:0d:74:29:ea:c5:93:7c:
1e:5c:c7:e8:97:8e:28:d9:a8:81:d4:20:9e:89:13:
10:77:d0:dd:82:f5:ac:5d:6c:bd:ee:09:50:7e:0f:
c1:54:14:98:06:29:ee:2b:01:72:41:39:38:6e:5c:
74:da:04:49:d9:07:76:dc:4b:24:f0:cd:8e:0d:8c:
53:32:0b:df:c2:4e:b6:74:3c:cc:cd:53:2f:2e:20:
b1:b4:27:d3:cd:bf:30:0b:fa:9a:de:9e:b7:96:03:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:91:80:8B:6F:5B:55:D8:47:45:73:9C:92:90:62:64:6A:C2:F9:59
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:d2:25:90:4f:ed:50:8b:af:a1:4f:f6:f5:bf:3c:40:f3:18:
2e:75:e4:f5:d5:06:b7:19:45:37:27:bd:2a:db:b2:3d:dc:4d:
e5:97:69:67:f0:26:70:36:95:a8:40:b9:35:19:91:d2:ad:93:
02:99:97:80:85:e2:c4:29:fd:62:26:57:a5:05:c9:22:80:a0:
5a:a2:6f:94:42:d2:96:36:ec:7c:56:19:8d:4f:d9:f5:57:52:
ff:21:54:61:51:d5:8f:d4:59:68:9e:0a:fb:63:0f:98:1b:6c:
13:ff:de:4a:b7:fb:09:e0:17:28:b7:4c:a6:24:9b:e7:4f:49:
fd:e2:ce:5d:75:2b:85:6d:94:5c:f3:40:e8:a8:59:3f:39:8a:
e4:fd:25:44:79:67:84:a5:ff:da:7d:82:21:cf:ab:83:df:46:
5f:0e:29:b2:03:8b:3c:7c:9a:6b:bd:7d:6b:8f:bb:4d:5c:bf:
d9:a4:93:71:d9:83:cf:e0:62:ea:6d:c2:1d:32:d8:67:0a:c0:
72:0e:71:51:e1:e8:c5:35:1b:62:9c:2d:8b:6b:1b:f2:70:f8:
33:3a:6d:66:68:7a:48:d6:f4:1e:fa:e0:b2:61:bb:12:d6:3e:
55:51:b8:c8:fb:c7:9f:66:e1:b5:4d:58:50:ff:4b:84:99:60:
2b:25:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:01:47 2025 by rpki-client