Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: JmQ/PoUWTV4alTt+r+JzMy5cQxBi+HRcgzdk8rSfFI4=
Subject key identifier: 88:A9:3D:A0:BC:6A:74:68:75:A0:E5:7A:A5:B4:36:8B:59:03:4B:01
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 0197537D6E4B306F34398E2A128E2F8D99E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 07:00:18 +0000
Manifest this update: Mon 09 Jun 2025 07:00:18 +0000
Manifest next update: Tue 10 Jun 2025 07:00:18 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: SSOSPWXN9OQUDcRpzg/Cxjfbrx7MaEf+hKVqLrXUa70=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:6e:4b:30:6f:34:39:8e:2a:12:8e:2f:8d:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Jun 9 07:00:18 2025 GMT
Not After : Jun 10 07:00:18 2025 GMT
Subject: CN=88a93da0bc6a746875a0e57aa5b4368b59034b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:b1:0d:7e:74:1c:8b:0d:ed:4e:a5:72:4d:
22:24:5a:0f:9b:6c:7f:c1:54:ed:95:14:0d:17:ea:
e8:04:88:06:a9:60:ba:5f:6d:8c:c5:eb:08:be:a3:
37:8c:28:e8:d9:b6:44:6d:01:9c:54:4a:d6:6d:5f:
e0:2c:c3:26:1c:eb:41:00:ef:45:c6:b9:1b:4b:11:
7f:b2:0d:f7:a9:9c:d8:2a:54:ea:07:8d:b2:2b:74:
b9:34:16:ce:fd:f1:b8:b3:fb:0b:4c:40:59:ff:7b:
57:2a:32:9f:21:d1:3f:64:dd:0c:1a:c8:dd:d8:40:
82:c8:7e:90:3b:fd:10:d5:9f:cf:a3:01:38:9d:e5:
02:7b:da:bd:96:1a:11:24:35:a4:e1:59:f6:8c:2d:
78:a7:47:18:40:94:af:cf:66:c1:bd:c0:80:8f:5e:
d3:b1:71:d4:1c:df:84:fd:52:4f:cb:ac:41:b6:da:
74:f0:f4:93:1a:73:ec:84:1d:4c:9a:e8:ae:31:83:
ba:2c:ad:72:c1:a1:2d:cb:45:19:2e:74:e2:5d:4f:
8d:a5:0c:72:02:f0:46:28:72:7d:06:81:7b:5a:69:
9c:3c:c4:a3:4a:ab:53:a2:9f:18:d7:38:6c:c1:92:
75:34:90:36:47:d9:50:5f:98:ad:85:60:39:3b:e7:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:3D:A0:BC:6A:74:68:75:A0:E5:7A:A5:B4:36:8B:59:03:4B:01
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:14:6f:10:bb:96:92:82:8c:48:d5:ac:3c:a5:05:c6:bf:7a:
f8:6e:ee:c5:e8:3d:97:27:db:8b:be:e2:15:15:a8:35:65:ed:
02:02:29:d1:e9:83:48:b4:b5:fe:43:23:a9:2d:fb:2f:b2:e1:
db:ac:ce:c1:ad:62:af:c5:b0:44:e4:31:a7:44:75:c1:94:7a:
24:21:62:88:66:80:5e:66:12:84:4d:cd:dd:85:c4:f1:68:d3:
b0:31:b9:79:8c:8e:ee:1e:40:d6:2d:d0:7d:00:e4:41:94:6c:
9f:90:2f:8d:f8:cf:8d:72:c9:3c:15:ec:77:16:24:f2:a8:43:
f4:d4:c9:45:5e:f1:ef:36:7d:11:93:49:7c:2f:a6:85:c7:cb:
ce:f0:12:c8:f3:6e:b9:a8:d7:39:e6:38:1b:ba:f4:72:fc:74:
a4:fc:fb:c8:72:7e:8b:ad:8c:3c:81:c6:31:e4:65:6a:ef:14:
97:fa:b8:8b:4b:68:bf:99:0a:fe:4b:0f:fe:ef:c8:b9:af:3d:
c9:8c:ab:1b:ae:ce:44:61:cc:0a:23:16:29:ec:94:19:b5:43:
94:0e:fa:df:a0:da:1a:35:02:cd:c2:48:7a:70:e4:18:6e:a1:
d6:ea:f7:ff:39:75:67:0f:ad:3e:2d:ab:7b:2c:b7:ee:03:44:
ca:c0:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:27 2025 by rpki-client