Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: tKICbH0ACcdvS2UrNl63eEBdGSGnWmrREKv+0Dcaryw=
Subject key identifier: 3F:44:D8:9C:73:69:71:66:32:F3:C0:9E:59:64:DA:58:1D:0A:9C:1A
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019770E3144772A0022A75C1C7E60AC8672D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 00:00:19 +0000
Manifest this update: Sun 15 Jun 2025 00:00:19 +0000
Manifest next update: Mon 16 Jun 2025 00:00:19 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: kwZ9yxCzGQkJZ4sa0M+k+VUc0KH5/jWj2b8MeNFeuHM=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:14:47:72:a0:02:2a:75:c1:c7:e6:0a:c8:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jun 15 00:00:19 2025 GMT
Not After : Jun 16 00:00:19 2025 GMT
Subject: CN=3f44d89c7369716632f3c09e5964da581d0a9c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:23:96:8a:26:9a:0f:4f:e1:34:ec:ed:31:
c5:fd:1f:75:eb:2f:2a:53:0c:6e:3f:53:ab:bc:99:
2f:4b:33:28:3a:a5:88:e4:22:a4:93:bb:f3:fd:14:
85:31:1a:a5:b5:b1:b0:63:95:40:a3:cb:46:83:50:
c3:7a:05:6e:ab:64:6c:70:71:97:c0:c4:32:71:85:
a5:5c:65:40:00:6d:a7:c4:21:c5:64:a7:c1:92:7e:
29:65:95:b3:63:40:b5:ec:c0:bb:7e:f9:af:c5:2c:
1d:72:0f:ff:86:10:48:a7:94:ef:ac:4a:59:35:bd:
94:43:7b:10:4a:e1:c9:e1:18:ae:eb:d7:a2:3a:b3:
f4:0c:d9:bf:b1:ae:55:21:0f:b5:ac:6a:73:2f:40:
a2:f0:8a:d9:73:21:30:90:f1:d2:2b:7f:ee:b2:a5:
0a:14:bb:d9:ac:c7:ce:e0:a6:90:30:11:16:cf:79:
72:5f:4c:86:8b:41:42:36:68:52:f2:05:bb:e5:02:
b4:65:c9:e7:0c:5b:6f:dd:99:a4:22:1c:0f:c9:b4:
68:23:53:8d:b6:c7:18:22:93:77:02:aa:9c:d7:77:
e0:5c:fc:98:0e:ae:ba:6a:8e:39:e0:b0:05:5d:38:
93:a2:b1:af:b5:91:ba:88:91:b7:54:c7:50:78:54:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:D8:9C:73:69:71:66:32:F3:C0:9E:59:64:DA:58:1D:0A:9C:1A
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8a:b5:79:9a:6f:87:90:c8:78:8a:7a:8c:16:6b:b7:0f:57:
3a:37:f3:cf:79:d2:bb:17:22:7b:71:a4:aa:16:8b:4a:c5:ac:
51:88:25:76:b5:69:a5:2e:d3:39:fc:db:7a:6d:1a:cf:4d:b2:
63:e6:88:02:a3:95:21:fa:04:10:7a:22:f5:e2:24:23:15:25:
ef:8a:df:11:0e:af:26:3c:0c:ca:93:ba:33:e0:e5:37:45:47:
02:96:23:56:39:fa:65:08:4f:30:ef:3f:73:0f:6b:d1:b7:15:
e5:95:b6:46:3e:f2:4f:d6:eb:3e:bd:4c:a3:3b:09:a8:55:b1:
5b:da:db:c2:a2:90:0f:47:c8:df:14:56:14:2b:0e:16:cc:94:
b2:fb:ed:9d:e0:d4:60:4d:44:7c:fc:0f:47:6f:6e:bc:76:9a:
75:0a:ba:a6:b2:da:ef:c8:ef:b4:5e:35:5c:92:75:7a:8d:0b:
58:27:a7:9d:37:bd:19:09:c6:71:27:10:20:34:e3:7c:24:3b:
11:18:0d:c4:47:92:d0:91:16:74:33:f3:9c:1d:4d:1a:15:55:
05:ac:f8:f0:59:d0:20:84:75:2e:9a:b2:16:94:6d:ce:9b:04:
65:bf:c2:15:53:40:3e:95:1a:05:3f:88:29:de:cf:66:d9:5f:
11:68:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:12:34 2025 by rpki-client