Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: y2zS/jkpPWrY1586snpeDOkN9XcWK6JNvUOKBnxaVls=
Subject key identifier: E7:9C:38:10:51:26:1C:DC:BD:72:64:A9:88:1B:51:BC:76:34:12:D2
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 01976929CF273F512C20A6D3DD0DFB03D899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 12FA
Signing time: Fri 13 Jun 2025 12:00:37 +0000
Manifest this update: Fri 13 Jun 2025 12:00:37 +0000
Manifest next update: Sat 14 Jun 2025 12:00:37 +0000
Files and hashes: 1: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (hash: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=)
2: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (hash: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=)
3: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: Wvxmn1prfxYvVKSnAiKwOq3HSBPPoIfSoA61UgplfDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:cf:27:3f:51:2c:20:a6:d3:dd:0d:fb:03:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Jun 13 12:00:37 2025 GMT
Not After : Jun 14 12:00:37 2025 GMT
Subject: CN=e79c381051261cdcbd7264a9881b51bc763412d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:0d:c5:03:4b:68:2f:c5:ee:fc:6a:ad:fc:
19:90:42:8f:92:25:e4:e1:3b:61:c4:25:a6:4a:33:
01:ca:f7:5b:e5:3d:74:ad:d8:00:49:8a:7d:44:24:
89:ef:c7:43:41:cd:ad:0c:71:d8:e2:60:c0:85:b1:
97:98:86:44:10:c6:3e:4b:78:df:84:7c:bb:9e:4b:
ae:b1:11:fe:fb:fb:62:0c:08:6b:70:f6:78:01:17:
53:fa:4c:b1:9a:5c:b2:02:5d:e1:fb:da:33:73:38:
95:4e:f7:7d:c4:f2:3c:dc:6b:7e:28:d5:e1:94:83:
5b:f1:b8:c5:62:1c:9e:38:46:89:67:3c:6f:c0:1d:
e4:17:8c:a6:22:ec:5b:d1:31:fa:92:51:82:20:2c:
1f:69:9d:b0:c5:37:9d:d9:6e:bb:29:dc:c6:a6:3a:
76:02:07:21:51:1b:38:08:d6:74:40:c9:ff:fc:13:
de:91:c7:e7:f8:bc:77:9a:e9:f2:9b:a9:88:03:c9:
f2:a2:12:13:c0:02:2c:1a:1f:d7:98:3c:c4:d4:7c:
4b:90:1e:7a:26:bb:e5:94:59:e4:14:52:57:be:d7:
77:cf:4d:77:c3:d4:17:97:17:87:7a:be:e1:e4:e7:
1a:1a:b9:cd:ca:e8:74:bd:2f:35:19:9d:b9:35:f2:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:38:10:51:26:1C:DC:BD:72:64:A9:88:1B:51:BC:76:34:12:D2
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:82:d0:1e:52:d8:7d:ad:d6:38:fd:86:af:89:ca:ce:b6:96:
cb:5b:f7:08:a1:b5:2f:23:55:26:61:1a:77:ad:1f:53:91:e9:
af:33:da:83:64:4f:a5:bb:4b:dc:55:14:33:32:13:bb:bd:cf:
56:38:de:db:98:cb:81:fa:64:e1:4d:f3:44:38:22:69:98:cc:
55:c9:55:2e:68:c4:1b:aa:a8:2e:8f:ba:2a:9d:60:b7:78:e9:
30:4f:3d:5d:43:ed:23:1c:c1:8e:4c:18:9e:40:02:4e:65:10:
52:54:72:c5:03:5b:a8:51:4d:ca:d7:c1:e6:6d:80:f1:b9:8b:
7e:5a:e7:b0:f3:cc:23:7c:80:60:51:34:da:5a:06:ab:0f:ea:
c5:5c:6f:8b:12:76:42:f6:fe:e0:1c:c8:ec:95:ea:e7:8a:d9:
d8:c6:97:76:a8:80:79:f5:b8:cd:12:6d:17:21:57:4f:89:2e:
98:dc:47:59:02:3d:42:0a:c7:9a:6e:9d:de:18:eb:84:f2:30:
c5:6c:76:9c:07:c0:f9:0a:14:6c:25:6c:fc:e1:81:56:3b:fa:
bf:df:93:07:12:d5:a9:41:41:2b:54:7c:de:ef:6a:b2:0b:41:
a4:b5:d9:dd:2d:f2:45:65:89:8b:a1:9c:3a:83:bb:b6:78:3e:
2a:8b:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:56 2025 by rpki-client