Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: 6eWvtfUnwFxwMzvWvRe4hlqOafb2xts5Iz99NqR1gQ4=
Subject key identifier: 99:A8:21:92:AF:E9:1A:47:35:C0:54:31:7C:D0:A4:28:16:08:25:DA
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019771F5C6D552B7A175D92F437907603F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0A9B
Signing time: Sun 15 Jun 2025 05:00:21 +0000
Manifest this update: Sun 15 Jun 2025 05:00:21 +0000
Manifest next update: Mon 16 Jun 2025 05:00:21 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: LkonlOjZ/y94h8cu9yXxqyzYZ3KNyr6SJHEeTaNPAiI=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:c6:d5:52:b7:a1:75:d9:2f:43:79:07:60:3f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jun 15 05:00:21 2025 GMT
Not After : Jun 16 05:00:21 2025 GMT
Subject: CN=99a82192afe91a4735c054317cd0a428160825da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:b2:31:e1:70:b0:ea:1a:16:1d:95:4e:fd:
54:4a:a7:7b:6a:0e:29:da:dc:77:5a:14:c1:44:b0:
9e:20:40:79:ea:80:7a:0c:57:65:d7:b4:f7:4e:3c:
4a:47:39:e3:46:7c:61:f7:35:f0:05:11:54:f9:17:
ee:0d:64:e3:61:fa:d1:3c:b6:be:85:74:12:7e:93:
e2:80:2f:0a:6e:b4:75:fa:3b:a0:03:00:ae:f9:e3:
32:b9:ae:17:25:62:99:f6:ba:9b:36:15:c3:cb:54:
16:ae:b4:f1:d2:61:e5:f4:8c:ee:b1:60:66:68:89:
ed:58:71:29:b4:10:86:77:a4:01:19:c7:a7:58:84:
f0:82:4a:fe:68:20:5d:3a:ad:cc:a8:86:18:20:49:
6b:4a:ae:f9:4a:d8:79:2e:e9:1d:4d:34:f9:64:d0:
cb:e6:58:6e:7b:4a:b1:d3:70:27:62:63:3e:ca:be:
dc:45:cf:3f:90:3c:77:16:a3:93:c3:c0:f0:1a:51:
03:9d:c6:35:32:e4:e9:07:78:3d:db:dd:87:9b:b4:
18:40:49:47:22:24:fb:ba:b7:22:34:10:b2:bb:41:
97:cf:42:14:61:67:0f:7b:8d:15:2e:db:e0:ce:4d:
e4:10:b8:91:ae:fc:e7:4f:49:78:16:d7:8d:fd:33:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:21:92:AF:E9:1A:47:35:C0:54:31:7C:D0:A4:28:16:08:25:DA
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:32:5a:df:55:4f:69:6d:e1:49:5b:2a:03:b5:ee:b7:b7:
c8:6c:94:61:aa:9d:dd:2c:d2:e8:bc:a1:70:e1:a3:a0:b5:cf:
24:cf:d3:06:17:9b:b8:40:65:d7:ed:82:be:c8:2f:cd:70:08:
65:fb:b7:d6:38:60:6f:35:85:ba:55:27:9f:9f:c3:9a:1a:ff:
8b:71:35:88:e9:09:4b:eb:fd:f4:39:93:dd:24:80:ae:fe:1e:
1e:42:e3:44:50:b3:4b:f3:5b:2a:cf:02:ea:fa:7b:d5:04:ca:
7f:d9:a2:8d:92:ea:bf:dd:eb:6d:8e:0d:7d:23:96:81:54:96:
01:04:16:a8:ae:9c:83:f1:a7:b3:b4:d4:69:6e:2a:ff:ab:ac:
22:c0:d3:a2:6c:2d:92:15:b0:55:8f:60:f2:08:48:22:83:fc:
88:9f:0c:79:12:cb:c8:65:d0:d5:a0:55:3e:ac:31:9e:12:f6:
5f:d2:0f:40:c8:7d:49:b5:31:86:77:ab:8e:a4:3b:12:67:06:
f5:1d:9b:49:8e:10:6a:c2:c8:fd:29:47:87:a4:60:9d:ed:38:
e8:6d:e0:ab:b1:fb:5a:fc:0d:fa:d7:d2:d0:09:ff:9a:77:e0:
61:79:d9:37:fc:71:b9:0f:90:f8:87:37:14:2e:9a:56:2f:f2:
f1:fa:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:37 2025 by rpki-client