Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: 2W4804m9BZhZRd3dwdwSVOevV2WXi2IHGUAs/UONRxs=
Subject key identifier: BD:44:17:FB:51:91:1C:D1:EA:05:EC:23:BD:C4:92:D4:E6:69:B3:C3
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019893DAC9226B371EA2C782C1F08C84000E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0436
Signing time: Sun 10 Aug 2025 12:00:45 +0000
Manifest this update: Sun 10 Aug 2025 12:00:45 +0000
Manifest next update: Mon 11 Aug 2025 12:00:45 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: LmHi7mXrPlgdVzsSlMxCrZUCWXX6ISTeLRyDIMAkaXA=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:c9:22:6b:37:1e:a2:c7:82:c1:f0:8c:84:00:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Aug 10 12:00:45 2025 GMT
Not After : Aug 11 12:00:45 2025 GMT
Subject: CN=bd4417fb51911cd1ea05ec23bdc492d4e669b3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:42:0b:f9:de:5b:e0:74:57:a6:0a:d4:ad:
4d:21:a1:fc:07:99:f7:64:4f:c7:45:2b:d0:45:42:
d4:5b:a9:9c:25:ca:75:56:6c:0e:7e:1b:c5:5d:c1:
40:37:e1:ab:6f:c5:99:26:b7:01:14:b6:b4:93:88:
9b:a5:5a:0b:17:3c:a7:f0:a0:9b:43:75:ba:c5:78:
17:ac:c1:80:94:48:de:be:06:93:1e:9c:45:cc:47:
c8:ed:95:7f:58:f7:37:7c:50:fc:4f:5e:dd:d8:6c:
66:b0:4b:de:4a:fe:be:01:68:22:46:b9:66:51:4e:
0e:94:10:8d:46:19:46:d1:f0:0f:d3:d0:2e:bb:41:
c2:09:e7:c7:c1:41:7c:e1:b7:76:ef:57:6a:d6:c7:
dc:1d:9b:d2:59:62:dc:d2:36:f6:27:6f:8a:b9:56:
bd:c2:73:bb:20:42:c0:6d:0a:3b:57:c2:19:c6:90:
e0:ad:4b:15:a3:1d:dc:29:ab:09:05:6e:e5:60:a9:
66:b4:f1:95:2e:ec:af:e2:f5:1d:eb:03:94:50:8d:
4e:a8:03:27:72:a9:0f:cc:0e:74:c6:ee:f5:5b:88:
ac:c2:6e:e1:78:c1:8a:e8:b8:b3:78:61:5c:5f:ff:
20:75:43:43:ad:ef:7e:53:22:70:ef:87:8b:48:e0:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:17:FB:51:91:1C:D1:EA:05:EC:23:BD:C4:92:D4:E6:69:B3:C3
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5e:ae:07:58:c9:19:81:d6:c3:20:cc:b0:0b:06:ef:f7:4c:
1b:75:4e:e0:4f:3a:0b:10:22:3f:85:d2:02:ce:71:16:04:da:
06:fd:71:4e:7e:fe:5c:e4:38:e1:7e:72:f9:a4:2d:09:42:92:
6f:0b:b0:6b:e1:af:0c:10:4a:6d:09:1c:ac:fd:a2:36:be:6a:
fe:e1:b4:2a:e8:b3:19:12:85:37:87:a7:34:f7:53:56:84:ef:
23:aa:aa:3c:54:a0:75:04:7b:50:b9:3e:fa:cb:21:13:8a:84:
37:bc:e9:cb:9e:0c:4d:49:7f:0f:26:a5:3d:b4:f1:b5:3f:33:
ed:06:8b:5b:78:cd:54:ca:a3:e8:bb:a3:f9:8f:23:6a:10:44:
ce:cf:33:45:2c:8e:f0:d7:24:52:b5:ec:58:64:d7:18:5b:dd:
cb:30:b8:a8:b5:89:7d:68:39:cc:b2:6c:f9:8c:13:92:0c:d0:
36:28:7f:26:7a:c7:55:f3:2a:90:62:85:1b:c6:3c:84:1b:aa:
c6:29:dc:07:17:c0:5f:52:be:8a:ba:cc:a4:89:b8:c0:16:c7:
cb:e0:11:20:e9:92:7f:ec:1b:24:0c:4b:06:ef:d3:f4:cf:ce:
e9:0b:af:fc:d0:99:67:18:cb:1c:2e:61:ac:21:6c:ab:80:3e:
96:64:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:01 2025 by rpki-client