Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: P7YElXLThrWptN3cCg1Nelr8W/m7tP3TPDA2Kf9TLr4=
Subject key identifier: 04:A8:BD:21:95:CD:7F:EB:DF:AE:81:BB:89:AE:C7:71:6B:34:38:F1
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 0197469DF7794B9D3401DBD0B5BEBCB5A668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1582
Signing time: Fri 06 Jun 2025 19:00:47 +0000
Manifest this update: Fri 06 Jun 2025 19:00:47 +0000
Manifest next update: Sat 07 Jun 2025 19:00:47 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: iA4m2N4L+9UDx4pa+TP5Hnv/GgENX1Q3w2FcUXuDu8o=)
2: yAlyRVhdV45Fhlz_SXSaEBYr95c.roa (hash: hbq+j/95NHgwMsXopbiJ/iZdMmpOcPkLx/w1fsKJD10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:f7:79:4b:9d:34:01:db:d0:b5:be:bc:b5:a6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Jun 6 19:00:47 2025 GMT
Not After : Jun 7 19:00:47 2025 GMT
Subject: CN=04a8bd2195cd7febdfae81bb89aec7716b3438f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:c3:83:85:f7:dd:03:bc:c9:f7:23:43:80:
a3:29:d6:dd:40:f9:5a:58:f6:54:c3:ff:a1:d3:54:
f9:89:1c:5e:b7:a5:01:7a:55:a8:25:a9:f3:15:c6:
a8:a1:05:e0:a6:c5:b7:98:4e:4f:c6:68:e2:17:0b:
6f:4f:b2:93:c1:6f:8d:ea:20:31:dc:ee:8b:ce:76:
c2:d5:56:1e:37:9e:23:2d:9b:af:b3:3a:2f:63:92:
3f:63:23:a5:63:4a:2e:86:9b:5d:13:75:75:1e:7d:
f4:68:21:3f:e4:ae:4c:a0:a9:bc:33:ad:b1:4e:ac:
09:57:fd:05:fc:f8:b6:9c:0a:92:1e:69:06:28:94:
03:0f:73:1c:99:0a:17:33:69:b3:1b:f6:43:56:46:
76:4c:4a:fb:1c:3f:94:9c:cb:89:52:b3:be:53:a1:
83:52:6e:db:a4:e3:55:37:76:6d:63:94:7f:a5:6a:
9f:83:97:88:68:89:ce:c4:f1:86:ea:da:1f:e8:79:
8e:16:bf:b7:61:a9:58:20:ce:3c:4b:e2:17:7a:76:
a5:ad:17:fb:21:76:3a:0e:04:06:bc:02:1b:af:b5:
fb:39:56:fb:be:e1:3f:ba:c2:79:64:88:ff:90:6e:
ff:89:fa:4f:d6:0b:3d:69:1d:22:2e:85:08:bd:41:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:BD:21:95:CD:7F:EB:DF:AE:81:BB:89:AE:C7:71:6B:34:38:F1
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:59:a8:c7:46:b4:bf:16:70:37:72:d8:a8:e5:11:c8:30:98:
fc:67:48:6b:1e:fc:00:c8:d9:a5:52:39:08:67:f8:07:77:1c:
b6:5c:cb:57:fb:c6:a2:8e:66:27:e4:94:a2:45:5a:fd:13:1a:
9f:2f:25:25:23:29:ce:ac:07:ce:22:6d:f1:14:9e:31:a2:cd:
49:b3:e9:c1:56:9f:ba:b9:e4:9b:47:7c:cf:d0:07:14:38:d7:
d0:a8:30:e2:ce:6e:87:09:e1:58:ec:a4:29:2e:ab:47:01:bb:
ca:70:e8:93:30:f5:d9:cc:4d:a8:f1:8e:8a:3e:30:9e:d2:45:
50:38:4b:43:30:7b:98:b8:01:a4:af:1b:df:62:fc:b2:c2:54:
de:c4:bc:6e:36:4e:d0:c7:60:2a:46:95:75:13:13:68:85:24:
75:bf:cb:e9:53:b7:53:f4:56:7f:b0:19:b4:c5:66:ba:43:d6:
5c:d4:3f:d5:e8:5f:8f:30:28:9a:2e:36:82:51:43:4f:4f:04:
b1:fd:5b:7d:43:b6:52:40:72:b2:d8:19:5a:0f:87:8c:22:9a:
6e:ae:c7:fa:ab:08:a2:57:0d:6b:2a:57:c5:b2:7b:91:26:9f:
4c:63:c8:d7:a0:20:17:63:46:fd:5f:31:51:ba:2d:6c:5e:e4:
56:89:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:19 2025 by rpki-client