Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: lVondXY8TCOt7LxFt1r1niJVMEVrLW4uQFj45AvabGk=
Subject key identifier: AA:1D:01:13:60:0A:1D:CD:09:0F:F2:E0:E6:75:20:59:6D:6C:7A:8D
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019873E3B65E987FE4D647C4B4D71D85CE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0CD2
Signing time: Mon 04 Aug 2025 07:02:39 +0000
Manifest this update: Mon 04 Aug 2025 07:02:39 +0000
Manifest next update: Tue 05 Aug 2025 07:02:39 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: gnEhouiiEFnt7kd00PbbmYfDDQpiELMjGCa+GHvAYFM=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b6:5e:98:7f:e4:d6:47:c4:b4:d7:1d:85:ce:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Aug 4 07:02:39 2025 GMT
Not After : Aug 5 07:02:39 2025 GMT
Subject: CN=aa1d0113600a1dcd090ff2e0e67520596d6c7a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:62:3e:1e:2c:0a:3a:f1:97:d8:44:0d:e5:
23:2c:ef:6d:76:6f:ce:7b:68:7d:88:25:ec:3c:17:
fb:35:f3:46:20:08:ff:01:db:94:6d:4f:8c:f4:ce:
50:d2:76:17:cd:9b:b1:df:99:44:42:33:36:20:19:
e3:fd:e0:a6:8b:53:9c:0c:98:d7:54:ff:d5:53:43:
7a:1c:ab:12:fd:dc:12:21:6f:6b:13:b3:4f:59:1b:
77:f4:0c:28:51:c5:19:c9:dc:a5:68:7d:a9:43:b5:
38:26:4d:b2:3f:96:d7:99:d8:13:f0:da:38:b6:65:
f0:6c:82:b6:13:92:d1:ba:17:7a:4a:d6:0e:99:fd:
72:37:10:7b:e1:71:6f:8d:fe:3c:73:5c:6c:13:9a:
22:e5:10:1e:7a:d8:30:74:e5:fb:9d:31:db:21:e7:
f0:de:58:39:07:82:c0:08:b1:82:1d:5d:b2:55:d8:
1c:82:cb:ac:45:58:1f:a7:04:e1:3b:d1:b1:8c:ce:
e1:c5:79:19:cf:09:ce:34:fc:1a:81:88:6d:30:90:
96:ad:65:e2:f1:68:38:8e:47:77:ae:30:9d:b8:b2:
ea:a8:25:e7:38:d5:e2:cd:c0:b7:5c:0f:15:20:b9:
95:72:f7:34:23:fb:18:9b:e7:de:a2:b6:f0:a2:08:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:01:13:60:0A:1D:CD:09:0F:F2:E0:E6:75:20:59:6D:6C:7A:8D
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:e9:75:59:13:5b:e7:c6:ed:ce:dd:db:59:85:80:b9:81:
29:de:ae:11:a2:39:ab:70:bc:7a:fc:44:b2:1b:dc:de:38:d0:
06:2a:49:3c:b1:82:27:3e:8f:8b:f6:34:83:5a:31:2a:7c:90:
6a:ce:58:2b:b4:7c:b4:8b:41:7c:cf:24:6f:45:08:92:e7:e0:
69:c2:2d:ce:13:7e:71:c1:21:fd:fb:a0:6c:a8:c3:25:32:78:
b3:ea:8b:63:c5:e5:c5:1c:fe:1d:c6:4f:aa:7d:0c:59:1a:3b:
ed:3e:2d:0c:46:05:74:ce:d5:43:c9:6e:cf:49:d9:79:4b:a2:
87:91:3b:0c:bd:eb:f7:16:c3:d8:73:86:54:19:32:ab:14:c0:
84:bf:c5:a4:fe:71:5d:35:19:73:bb:9f:13:e6:0b:b8:42:de:
14:f4:4a:6e:3d:ac:28:1a:0f:49:84:c6:4f:bd:55:bb:eb:72:
bf:34:8c:23:0a:0d:e1:8c:22:a7:76:57:34:6f:0e:ee:56:3a:
19:33:31:cf:5b:f8:99:16:eb:cc:6c:24:62:88:5f:58:a6:47:
ca:af:93:ea:d0:92:06:74:74:fc:3d:09:7e:60:c2:9b:5f:3a:
57:bf:f8:c9:a6:18:54:19:9a:a0:72:6d:7e:5a:f8:71:e1:36:
50:26:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:21 2025 by rpki-client