Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: i3Gz/lilyfdjP8ug6tlR2iI1/waIBJyOrEYicUlFkAU=
Subject key identifier: 6E:EF:E7:05:64:76:8D:8D:C7:88:E4:7E:08:C7:31:9B:E8:26:1C:4E
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019892FF274B0CE3A987AD1D8046BD4C86E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1632
Signing time: Sun 10 Aug 2025 08:00:51 +0000
Manifest this update: Sun 10 Aug 2025 08:00:51 +0000
Manifest next update: Mon 11 Aug 2025 08:00:51 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: sQimpkQd9Ng8x16zkOK0ChM8fZN89UXzxOuFOlxn25s=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:27:4b:0c:e3:a9:87:ad:1d:80:46:bd:4c:86:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Aug 10 08:00:51 2025 GMT
Not After : Aug 11 08:00:51 2025 GMT
Subject: CN=6eefe70564768d8dc788e47e08c7319be8261c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:cf:73:ac:db:52:62:86:95:a1:f9:e3:66:
18:38:be:4b:47:82:17:06:93:0d:83:95:3b:75:b2:
45:29:34:ca:ec:ed:4f:d6:72:1f:b7:18:0b:1f:85:
3a:62:3b:4d:af:c4:a0:ab:6f:bf:61:bf:00:38:02:
27:5b:d0:24:0a:be:02:0c:73:75:7b:ec:cf:db:b8:
db:2c:95:93:94:c6:9d:30:a5:3d:77:5c:69:2a:3d:
b7:cb:bb:71:3d:47:c7:54:c0:98:91:de:e6:a6:e9:
4f:8d:fe:b6:c1:d4:5c:5e:f9:37:92:45:cd:11:d4:
f7:78:42:e7:e9:08:8c:73:fa:df:63:9c:9f:b8:7c:
67:aa:ec:dc:bf:ae:f6:7f:5a:55:82:5f:28:65:61:
1e:11:14:6d:65:f6:a4:b4:c2:1e:6e:d4:d9:c5:09:
dc:8b:22:26:39:4c:81:58:c4:28:cf:0f:b6:b5:56:
01:40:d0:11:c5:0f:cf:a3:58:9e:7d:1b:94:17:bb:
a3:0f:96:78:2b:c3:02:52:3e:5b:b9:88:12:96:3d:
ef:0b:ec:36:cb:ff:4f:d5:05:58:6e:1b:e6:0a:6c:
8c:fe:dc:f2:c2:e4:e9:bf:1d:75:5c:b4:f0:48:31:
12:a5:6c:6d:7c:a9:85:8c:1b:c0:5d:fa:2a:2b:59:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:E7:05:64:76:8D:8D:C7:88:E4:7E:08:C7:31:9B:E8:26:1C:4E
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:28:ce:52:7c:fa:c5:79:e5:09:f3:84:cf:1f:aa:af:b0:1d:
71:fa:63:e6:2a:e6:43:08:4f:91:f4:9f:4f:e9:6e:8d:9c:f2:
fa:86:21:be:e0:09:45:36:f4:b1:aa:b8:d3:ad:4f:79:71:fe:
df:56:47:c3:5a:eb:d5:87:65:96:00:23:f1:b2:7f:ff:1c:87:
e6:04:fb:59:01:9d:5e:9b:ef:e8:b1:4e:80:72:55:b5:0f:bd:
da:71:2c:e3:a0:de:7b:6d:9f:41:65:c4:d7:1e:2b:20:78:ba:
11:e1:93:91:4a:d8:64:37:8c:0f:eb:44:c7:f4:0b:9a:08:7a:
73:c6:47:41:79:d9:04:8f:e2:41:75:4a:1b:e3:13:41:75:40:
18:a7:c4:73:d0:fc:25:fb:a5:e5:6c:e6:b9:d7:37:81:d4:0b:
70:0a:3d:69:07:5a:97:7e:34:16:e5:80:9f:1a:9c:2d:47:a6:
13:e2:a3:bd:7e:60:61:e2:e4:f3:6a:70:72:10:4f:ae:14:b9:
b4:65:a4:65:bf:8b:98:90:2c:cd:89:7a:51:9b:2c:a5:70:f9:
dd:62:19:f1:3b:9d:11:91:bb:6f:04:f3:5d:7a:70:4c:7a:8d:
30:51:9e:96:99:37:4e:3c:f6:46:48:a9:bb:83:e6:90:6e:ca:
09:9e:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:45 2025 by rpki-client