Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: REt1GK3eTJucAD/hcE9v1boN4RiRT5XEdnNFNUDom38=
Subject key identifier: F1:D6:B8:89:79:2C:28:D4:D4:30:CB:08:AE:B3:7B:E8:30:56:28:91
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 01977263FB41612578D23DE9F885FEA083E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 07:00:44 +0000
Manifest this update: Sun 15 Jun 2025 07:00:44 +0000
Manifest next update: Mon 16 Jun 2025 07:00:44 +0000
Files and hashes: 1: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (hash: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: zdeXDSL1p1K/kxj3+305z0+a3Yk+xpBedM2Mg0XS/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:63:fb:41:61:25:78:d2:3d:e9:f8:85:fe:a0:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Jun 15 07:00:44 2025 GMT
Not After : Jun 16 07:00:44 2025 GMT
Subject: CN=f1d6b889792c28d4d430cb08aeb37be830562891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:84:7c:8c:b0:70:9c:84:55:f6:d8:e5:8d:
7a:40:1c:90:e5:d9:06:39:a8:34:2d:e4:22:c6:1d:
28:80:21:16:4a:78:90:cd:6e:6b:70:ca:99:ab:63:
b9:d8:17:70:9e:83:91:df:75:44:71:a4:62:15:cc:
f8:e2:20:b1:71:ff:e0:81:f8:22:6f:8c:5b:36:22:
07:72:02:50:c3:e6:96:12:69:09:ac:bf:76:86:99:
15:50:4e:e3:fa:d1:4e:58:58:5c:5c:e6:cf:25:42:
b2:93:8d:0d:00:68:3e:22:06:bf:1a:c8:8c:80:97:
ca:70:7c:ee:47:f2:e3:72:4d:48:0b:8d:93:24:c4:
f5:e7:2a:08:e0:db:81:e8:11:d2:00:64:b4:2c:49:
2f:b0:a2:1e:9b:37:a7:06:a7:6f:92:83:be:97:f0:
14:c1:21:88:a0:93:04:bc:61:e2:c1:ea:99:1f:bc:
3c:12:f0:62:c9:20:3b:a7:aa:98:0e:2f:e5:da:04:
9b:ed:ac:d7:42:5e:b0:8d:43:1f:84:4b:07:00:b4:
5e:95:ee:2a:77:26:5a:b8:96:28:a3:17:73:fe:32:
e7:c4:2b:89:0a:71:ee:ef:e5:31:45:4c:30:66:ba:
77:e5:77:d7:7b:af:1a:df:4c:fe:d0:0b:a0:93:2e:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D6:B8:89:79:2C:28:D4:D4:30:CB:08:AE:B3:7B:E8:30:56:28:91
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:0a:81:b6:fd:57:c1:5d:de:4f:e2:2e:04:64:d2:45:dd:
b6:4d:1e:39:f4:da:b0:6d:9c:e0:2e:a7:d1:97:69:ea:84:76:
2d:6e:d0:74:80:68:5f:81:ce:50:ff:33:3d:4b:31:82:be:27:
5d:c5:1e:34:9a:3e:c2:0d:61:e9:e8:a6:4c:f4:b7:b7:1e:8c:
5f:8a:1e:b1:e1:b2:00:09:46:54:c8:ff:ee:b5:07:f8:5f:3b:
42:96:f0:43:3d:b4:83:75:47:a8:19:09:b7:ed:14:cf:38:5b:
bf:8c:66:8a:70:0b:9a:21:3a:55:3e:7f:1f:8a:9f:72:82:a1:
a4:6c:f1:3c:56:d0:0b:f9:4e:08:63:04:ec:82:66:75:1e:bd:
e5:87:cb:98:8d:3b:9f:03:1e:c3:86:9c:0b:4b:14:f2:0e:81:
d1:6e:99:9f:f7:c9:70:77:14:f9:e2:a2:f0:5c:1d:f7:5e:2f:
cf:75:e3:b5:de:bf:6b:9c:8c:57:be:41:3d:ef:f0:51:32:2e:
0e:b3:f9:3e:6b:f4:1a:ca:ab:fc:43:80:07:3c:a1:49:72:12:
e0:50:d3:53:26:a5:d5:02:51:9a:8e:dc:3c:a7:93:cb:22:38:
40:c9:22:7b:33:74:a3:21:f1:d4:ef:b3:bd:82:62:d0:69:12:
52:87:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:03 2025 by rpki-client