Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: XH1HCAjQucTt2vNqaHsZ8lSKvl2S9ixe2YDVGGZgSkw=
Subject key identifier: D0:54:F8:39:33:AA:AC:9E:43:AB:7F:5A:0C:B4:46:BA:DD:21:51:0A
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019768F29CE52B6C5EFC8FC4AA427B283614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0EF3
Signing time: Fri 13 Jun 2025 11:00:19 +0000
Manifest this update: Fri 13 Jun 2025 11:00:19 +0000
Manifest next update: Sat 14 Jun 2025 11:00:19 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: VJ/3VifMYiW/6DTqDDYt60cc9eIWsFYoZr5sDurcQbM=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:9c:e5:2b:6c:5e:fc:8f:c4:aa:42:7b:28:36:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jun 13 11:00:19 2025 GMT
Not After : Jun 14 11:00:19 2025 GMT
Subject: CN=d054f83933aaac9e43ab7f5a0cb446badd21510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:02:f8:d0:00:73:ae:bd:86:1e:76:36:f2:
9b:31:3c:82:cc:55:e1:e8:32:2c:6a:bf:7f:c4:2a:
a6:10:af:cf:a7:59:48:22:7c:d3:79:ab:07:13:7e:
e2:12:03:c4:57:a2:c4:33:f0:05:ef:67:2e:f4:bf:
1b:6b:6a:cc:f1:0d:39:52:36:16:63:80:fe:4c:b4:
58:6a:5b:3b:d2:da:4c:4c:90:04:aa:7b:8c:eb:ac:
a4:f0:74:1a:52:7d:32:97:a3:7a:2b:5b:9e:33:5d:
36:b7:d3:73:04:10:76:bb:ec:89:05:26:84:e1:a0:
00:0c:82:3a:a6:92:cf:fc:78:c9:86:7d:bb:fb:3e:
02:c7:6f:1b:35:eb:7c:c1:6b:2c:48:d4:0b:75:71:
ea:27:2a:55:55:0d:89:b5:50:7e:f8:bb:47:88:4d:
52:54:0e:a6:3e:a9:93:9b:58:3f:06:d1:f7:03:82:
e4:a5:ee:2b:8d:59:81:81:50:a1:ea:27:d9:21:71:
a7:57:83:86:d2:19:3a:38:9d:e0:6b:16:a9:37:31:
af:33:25:54:63:cc:09:80:4e:bb:54:43:d9:f7:fe:
56:8f:24:c7:d7:2d:40:e5:0c:bd:f4:24:04:ab:62:
7d:eb:d9:e6:81:bf:93:db:b1:23:30:fd:8f:1d:24:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:F8:39:33:AA:AC:9E:43:AB:7F:5A:0C:B4:46:BA:DD:21:51:0A
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d5:40:36:cc:84:9b:08:02:fd:08:ff:a5:80:1e:7d:78:b0:
10:8e:65:93:0a:37:b1:b3:89:4b:1a:04:b7:15:86:80:f4:72:
f5:11:79:df:73:67:3a:c5:9a:97:fd:63:70:f6:8e:59:9c:5a:
35:01:7c:cb:8d:dd:1b:46:b0:4e:1c:7e:55:fa:e2:5a:a1:6b:
43:b7:68:18:31:ee:5d:c2:1a:b8:87:94:eb:96:df:e0:17:71:
f4:7c:5b:c2:ef:df:2b:30:66:5f:7d:65:f9:c4:43:48:b9:d1:
57:6e:8e:fc:44:05:3a:3a:38:cb:19:66:9a:d8:45:56:09:55:
ba:b1:63:af:68:6a:8f:f1:0d:58:b7:45:e7:af:15:71:2b:f3:
0f:f7:de:e7:36:3a:f3:54:e1:8a:ec:08:24:65:f7:ea:f0:60:
b5:65:c3:f5:c1:1b:c1:28:b5:0a:c1:6a:a6:83:b3:91:8c:74:
1f:b0:37:95:55:3c:6e:67:2a:8c:42:63:99:56:17:5c:38:b9:
c2:6b:10:ae:ab:be:14:7e:e8:8a:2c:ed:c2:e8:e8:d4:e2:79:
3a:0c:31:40:ba:d8:fc:d7:0e:76:4a:13:a8:ca:2c:f8:dd:d6:
b1:69:ab:a1:e6:ad:21:70:7e:17:65:75:3c:89:7e:14:96:e1:
66:18:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:56 2025 by rpki-client