Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier: hEgJtKU+6p8ubSpDPvhuSyfvIG6W1cGOI6VzqvUGc48=
Subject key identifier: 32:44:9E:E6:1F:B9:0A:B9:A3:54:B6:5C:06:B9:12:E9:A1:8E:94:FC
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial: 0197526B599D7210A1D6707F29A2F2BA8F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number: 0BAD
Signing time: Mon 09 Jun 2025 02:00:56 +0000
Manifest this update: Mon 09 Jun 2025 02:00:56 +0000
Manifest next update: Tue 10 Jun 2025 02:00:56 +0000
Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: B5u1VY++r+bcZqRZSl5uY8AoVXQG3mQZ21B4tsVd/8E=)
2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:59:9d:72:10:a1:d6:70:7f:29:a2:f2:ba:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Validity
Not Before: Jun 9 02:00:56 2025 GMT
Not After : Jun 10 02:00:56 2025 GMT
Subject: CN=32449ee61fb90ab9a354b65c06b912e9a18e94fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:20:3e:73:4a:c4:e7:a2:62:e0:ae:36:c2:
82:65:c0:86:ad:3b:88:a1:72:12:7d:8c:a3:7c:48:
fc:e6:8b:20:e0:ee:c1:d9:63:4b:b0:9e:99:9f:b3:
e2:3c:a2:20:47:8e:1a:77:ee:97:dc:67:9a:73:53:
2e:39:ea:67:d3:97:e7:eb:23:37:af:bf:2e:77:a4:
41:85:da:f9:24:7b:aa:91:54:a1:3b:0e:75:6c:7f:
77:57:06:18:f8:f8:c4:71:63:dd:05:1d:c6:a4:d6:
93:ec:59:63:72:bb:33:bb:44:d5:3b:ca:c1:cc:93:
b0:0e:8b:a1:14:4e:63:95:0e:02:d4:60:79:84:a6:
02:68:f5:e6:a4:09:41:16:0a:b4:db:b0:5e:8d:da:
cf:93:9f:47:28:27:18:4d:5b:ed:11:a4:d6:53:cc:
80:90:5d:1f:5f:3b:48:10:c2:33:07:0c:b2:b9:78:
bb:57:24:54:2e:79:aa:9d:1c:2b:84:41:57:ad:19:
d5:2d:0f:6e:37:ab:6e:35:40:66:26:75:db:7b:ea:
be:7e:58:fe:76:3a:5f:8e:4e:be:ac:15:67:e4:c5:
ea:72:61:57:56:2d:d8:5e:ae:78:1b:b4:62:22:ae:
26:dc:53:d0:49:f7:1a:2b:d1:2f:d9:ba:dc:ae:73:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:44:9E:E6:1F:B9:0A:B9:A3:54:B6:5C:06:B9:12:E9:A1:8E:94:FC
X509v3 Authority Key Identifier:
keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:67:22:92:bb:eb:ff:c0:98:0e:e2:3a:7e:50:66:b4:52:3b:
1f:11:99:1e:82:9d:b4:77:36:40:f4:04:3f:1b:03:c8:35:fb:
3e:b7:0b:c9:22:2b:c9:df:a6:87:58:de:60:cc:cb:7b:44:25:
52:ab:ec:81:fa:2e:85:4c:0d:51:20:e7:d1:05:08:1a:50:ed:
ff:f0:88:e2:d2:2a:3d:91:12:1f:04:53:a0:4a:63:11:9b:22:
89:46:d9:92:56:d1:b6:79:35:d7:97:18:c7:f1:54:7f:6e:96:
5d:f8:29:90:d2:f7:bd:ee:02:0b:96:dd:bf:81:47:af:ee:de:
b2:42:e8:7f:a5:05:77:db:fa:a3:49:80:c8:c6:9e:a4:32:b4:
64:3c:bd:f5:b0:1a:64:c8:df:47:17:52:48:f5:a0:5b:e8:f0:
db:bc:35:6b:97:02:76:4b:08:bf:8d:2c:50:21:47:ae:3e:d3:
63:6f:16:05:8d:a8:73:8a:8c:42:c1:95:8e:ee:ab:d0:7f:1c:
0c:b9:2c:7d:17:d3:84:d6:6e:f1:43:4d:96:72:22:26:b0:2c:
f4:ee:22:f5:47:5f:f3:ea:04:c3:34:cd:5b:f2:04:85:7a:48:
e7:8c:84:63:34:e2:82:32:5e:28:6d:69:5e:3b:5f:70:88:ae:
8a:67:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:06:18 2025 by rpki-client