Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: dS85QOko8qiiSNKSFMc4xCFn28SS/yikxfvHaxuz2V4=
Subject key identifier: 2D:1A:C3:B7:8E:BA:33:53:EB:A9:B7:1C:E3:A7:77:12:88:78:61:05
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 01976E504683D72575D7BFDACF6197BC72C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0B98
Signing time: Sat 14 Jun 2025 12:00:44 +0000
Manifest this update: Sat 14 Jun 2025 12:00:44 +0000
Manifest next update: Sun 15 Jun 2025 12:00:44 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 7YQFfUznVolKmQIs8nXL1ffGqtXDJz4Y5C8SBksm0mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:46:83:d7:25:75:d7:bf:da:cf:61:97:bc:72:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Jun 14 12:00:44 2025 GMT
Not After : Jun 15 12:00:44 2025 GMT
Subject: CN=2d1ac3b78eba3353eba9b71ce3a7771288786105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:b9:a1:d0:46:d9:1b:39:68:0f:2e:8a:8b:
7b:68:6f:25:99:48:6f:23:9e:ce:ad:18:83:d9:73:
52:fe:6d:84:8f:c5:41:d6:0d:b5:65:de:9c:d0:94:
57:dc:b4:e9:39:f0:60:e5:a7:2e:a2:83:d6:eb:9b:
4c:89:d9:41:28:5a:ec:dd:93:88:93:28:64:7a:33:
84:5c:b3:e8:81:9e:aa:83:f4:9f:bc:12:16:0e:16:
e1:ae:b0:99:95:39:93:46:09:3f:4c:ec:2d:ed:d2:
20:8d:44:57:d2:34:41:f1:76:ab:4a:4d:b8:69:aa:
0d:d5:4a:c7:cd:16:a1:68:57:14:f9:fd:2f:60:66:
92:8f:1a:47:d2:b2:0f:92:3e:de:94:72:2a:7d:8f:
e5:6f:22:54:ca:6d:5d:45:86:96:bb:18:7b:73:13:
3e:64:c8:59:9f:fc:bd:f4:35:e7:78:98:85:02:55:
7b:08:66:99:38:cd:d8:f9:df:6d:1f:c3:ac:af:ee:
49:f3:0b:7d:e9:21:d8:e2:d0:1b:14:7b:ad:7b:62:
e2:84:4b:a0:6d:f1:e4:be:5e:a0:bf:07:a6:ec:fd:
29:ba:78:65:db:df:95:ef:25:1d:6a:c6:63:5b:2c:
7f:3f:32:f8:ea:cc:39:f8:d7:42:78:45:b4:13:22:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:C3:B7:8E:BA:33:53:EB:A9:B7:1C:E3:A7:77:12:88:78:61:05
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:6d:0c:26:68:2a:11:00:f7:00:3c:ff:aa:f0:e8:4e:b8:
0d:34:c8:05:b3:4a:0b:93:d2:d0:07:5e:a7:c7:e5:92:7a:45:
ae:c1:8f:85:cf:a6:61:a2:fe:06:95:35:bb:9b:26:ff:47:ee:
93:2f:06:0e:91:90:02:77:4b:cb:19:77:8a:f4:06:e3:69:db:
ee:39:2b:38:65:03:a7:91:ea:51:b8:19:b6:22:19:1c:81:a1:
9a:10:d3:98:a6:74:0c:3d:9d:f8:ec:23:8f:3c:3a:22:20:e9:
85:ce:49:25:25:33:59:de:f5:9c:3b:b6:3e:4d:46:98:58:69:
59:80:13:af:5d:8e:72:8d:a2:71:bb:be:02:f2:b6:7d:4e:f4:
41:a6:5f:83:83:1a:19:d2:7c:54:d0:c1:0c:ee:5d:a1:c2:5b:
55:c3:1b:42:42:34:c7:dd:74:c3:e8:53:57:13:85:6e:3a:a1:
73:87:c3:25:04:20:c9:fe:b2:f3:f0:53:74:d9:d3:be:4b:71:
90:74:bd:d0:2c:00:22:da:be:cb:75:07:cd:e1:f3:ef:5f:ab:
61:d4:95:36:e1:2d:8d:5b:6c:8f:f5:70:37:58:ff:ae:f7:1d:
6e:b2:26:49:69:5c:47:62:63:cf:16:19:c6:1d:a9:e6:a8:98:
6e:95:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:10 2025 by rpki-client