Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: zWpgJmZ2/sTaWF8aZy096Er5ASeWvvSvm7ZmBOalkpM=
Subject key identifier: 59:24:83:0F:BF:00:46:3E:05:BC:10:C8:7E:50:FA:EA:7C:F9:B7:A0
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 01974F6A428DD0226F689F9171AE8FD206CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 1333
Signing time: Sun 08 Jun 2025 12:00:53 +0000
Manifest this update: Sun 08 Jun 2025 12:00:53 +0000
Manifest next update: Mon 09 Jun 2025 12:00:53 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: OaEFaGCAQfFe8fsP3pe7BP5Lj3Wor7EKT7G1BHB1Uds=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:42:8d:d0:22:6f:68:9f:91:71:ae:8f:d2:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Jun 8 12:00:53 2025 GMT
Not After : Jun 9 12:00:53 2025 GMT
Subject: CN=5924830fbf00463e05bc10c87e50faea7cf9b7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:1e:6d:fc:fe:6f:15:83:fe:0d:94:f7:c9:
60:fe:a5:24:78:7c:7a:e2:2b:b6:1d:73:49:1a:3f:
d7:dd:a2:d4:05:21:ae:c8:28:d1:9e:f8:68:93:1c:
19:2d:32:9d:14:4b:5e:fb:da:8f:88:71:65:d9:85:
a3:67:b4:92:23:40:2b:fc:f3:cd:41:d0:d9:d1:ab:
2c:a3:fa:fd:8d:f1:15:0d:72:f7:a4:36:58:41:da:
6f:b1:a0:c8:af:0e:47:2e:11:10:13:ae:26:5f:be:
7e:10:77:b2:29:db:b9:d0:e3:6e:fe:5e:57:92:7b:
e8:08:49:60:78:05:b5:c4:fc:2f:8e:92:31:c3:e2:
0a:49:5b:3a:bc:14:02:c7:04:31:58:5e:3a:05:79:
43:78:2e:a0:3f:9d:56:a0:09:62:b9:65:38:ed:1d:
46:e7:c5:5b:85:a6:c7:af:40:8a:19:bf:d8:95:bc:
61:4c:17:97:67:ba:fc:a8:7c:0a:46:76:89:49:fe:
92:50:66:bf:ec:88:10:8c:bf:7b:d8:3d:0b:c5:3e:
eb:34:92:a8:7d:33:a6:be:51:ca:ed:c9:7e:83:d4:
48:19:f9:b2:ea:eb:55:52:44:80:26:43:22:3e:48:
95:7d:14:b2:15:f2:4b:cb:d2:2c:f7:39:b0:0a:5b:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:83:0F:BF:00:46:3E:05:BC:10:C8:7E:50:FA:EA:7C:F9:B7:A0
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:66:23:15:8d:b1:b9:53:a0:6d:c5:4d:ec:4b:26:e0:19:
bc:f3:a1:25:3e:85:72:1e:0e:81:35:d5:93:80:b4:2e:d2:2b:
14:7b:5a:b9:2b:c8:6f:86:9e:66:c5:0d:c9:9f:9b:d7:3c:35:
ac:40:42:d4:37:c6:5f:76:63:ae:70:72:f6:f5:a1:09:1b:77:
a1:c5:ef:1f:04:f7:1a:5c:f3:16:2f:b4:9f:a7:12:24:7d:f8:
87:10:34:32:3a:18:7b:d9:ca:44:c2:3c:09:b9:d5:25:35:96:
68:47:aa:4f:22:45:4f:bf:dc:01:ec:c3:97:65:83:40:7b:7a:
1e:bd:db:e2:1a:a1:6a:8e:b1:f8:17:1d:0d:8d:22:44:b6:bd:
06:27:57:74:c2:9c:b3:c9:e3:c0:7d:51:d2:38:e3:29:d3:74:
a8:cf:3a:ac:1a:e6:03:15:0d:33:8b:50:0b:6a:0b:74:33:84:
95:8a:78:dd:68:03:98:2f:7f:54:0d:a4:2f:5b:59:06:50:9a:
78:60:e2:d5:57:f9:f1:d8:f0:c4:1e:9f:17:e4:4c:18:47:ab:
f9:33:8b:4b:a1:a6:79:a7:8e:aa:9e:62:84:a3:e1:ee:be:ca:
cf:ff:b9:fb:16:e9:98:f2:17:7d:2d:80:d3:8f:31:25:3e:2a:
4f:69:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:17 2025 by rpki-client