Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier: sTznkWv+TohkeAvXE5zbvINPvYooq13O36okGRHGS20=
Subject key identifier: 9B:13:2E:1C:DF:E9:34:3B:C3:5D:FE:DA:09:28:C3:C8:57:AF:40:B4
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 0197469E55906ED0861F3BD7F695F534C03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number: 0710
Signing time: Fri 06 Jun 2025 19:01:11 +0000
Manifest this update: Fri 06 Jun 2025 19:01:11 +0000
Manifest next update: Sat 07 Jun 2025 19:01:11 +0000
Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: 0rjgoxuKGbyBKoFKD0LeyaelbVrjYQeYbgj+dYb1VxA=)
2: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (hash: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:55:90:6e:d0:86:1f:3b:d7:f6:95:f5:34:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Jun 6 19:01:11 2025 GMT
Not After : Jun 7 19:01:11 2025 GMT
Subject: CN=9b132e1cdfe9343bc35dfeda0928c3c857af40b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:e4:e7:22:ff:31:6d:d5:23:6c:8d:24:03:
3a:0a:16:8a:70:ed:bf:fb:4f:37:49:ce:97:b6:33:
fd:3f:1f:34:b1:7b:d0:ae:dd:04:86:b8:6a:c8:7f:
3f:5e:42:ad:13:12:99:90:3f:99:a6:2f:53:40:29:
08:0c:78:af:0a:9b:97:9f:f3:c0:12:96:3b:af:a3:
b6:9b:05:69:1a:dc:00:b3:2e:a2:99:bd:30:b2:f3:
11:5f:1a:6c:a3:f2:44:39:7f:da:a5:8f:d6:cc:30:
b9:4f:dd:37:54:9c:71:99:84:9e:66:0b:90:5c:ed:
2a:65:cf:7d:63:46:9a:05:14:fa:c6:66:e1:4a:d2:
9f:d0:c8:d6:60:2e:4c:d9:a1:78:1d:c2:ca:bd:e2:
05:9c:ae:fc:f7:18:82:31:cb:f3:ba:3e:3a:cb:d7:
c1:a1:d8:15:5e:ec:ae:00:fb:1a:02:f4:e6:1b:39:
a7:f9:5e:d9:d9:6f:1f:9b:eb:6c:77:c9:4f:24:1f:
66:a4:4b:a9:87:86:40:01:53:a5:b1:40:9d:57:f4:
a6:d2:f3:cc:03:13:16:68:81:b9:6c:be:12:b6:a0:
f3:1b:ac:e3:42:2c:4e:e6:03:ab:95:2b:c1:d4:4d:
e8:f4:39:a2:f4:93:6b:ea:c2:d8:9c:24:be:17:5b:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:2E:1C:DF:E9:34:3B:C3:5D:FE:DA:09:28:C3:C8:57:AF:40:B4
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:68:77:7e:58:22:7c:3b:09:c5:01:59:31:e4:e8:57:56:
ca:0b:3f:0c:06:43:49:16:25:15:56:5b:72:e6:4a:66:3b:79:
b9:08:00:60:9e:4f:30:c7:66:2c:f7:1c:54:3c:b8:f1:15:d0:
ec:7e:42:74:16:c3:b8:67:a3:c1:f2:c4:48:b1:69:bb:5d:21:
48:c7:18:a1:8c:0b:3f:ee:7b:a3:3b:22:05:f7:a4:c9:f1:98:
2f:fd:f0:02:04:42:57:bc:3a:76:09:cd:0a:97:4b:14:30:cc:
06:a5:5d:1d:21:e6:5e:b5:ee:05:d6:29:ab:a1:5b:34:fa:49:
43:53:cb:14:28:a0:05:cc:9c:44:0f:72:a0:67:e6:7e:9c:2f:
15:36:56:4e:a5:3d:c0:36:73:ce:fb:5b:ba:c8:99:e3:ef:6d:
b5:d6:f7:66:b3:59:e4:f3:7f:70:58:95:49:14:dd:30:6e:3a:
63:35:52:79:5d:a1:17:67:65:52:98:b0:73:75:73:4e:41:56:
cf:c1:f2:8c:14:54:83:3c:c2:6b:85:31:45:0f:c7:05:f6:f4:
a2:73:ce:2e:e4:4d:e7:79:7c:7b:a4:83:1d:d0:8d:b9:71:72:
f2:35:0e:d2:51:c1:4c:9c:18:a8:c9:13:4d:4a:81:05:07:69:
eb:75:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:21 2025 by rpki-client