Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: KIfo1v/p/wIGg5Aa7UvxUSX06Wt3/jzFzBHsPr+VO1M=
Subject key identifier: 88:15:F5:F6:7C:C3:86:E2:48:35:76:69:DF:B7:59:79:09:FD:AA:26
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01974AE91EFED81A6EADDE9E9591A1A9DFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 15:01:21 +0000
Manifest this update: Sat 07 Jun 2025 15:01:21 +0000
Manifest next update: Sun 08 Jun 2025 15:01:21 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: Glx6YTZRzsGgAG6DK68ja3iQQwwIaLL+zcuxingN6v8=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:1e:fe:d8:1a:6e:ad:de:9e:95:91:a1:a9:df:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jun 7 15:01:21 2025 GMT
Not After : Jun 8 15:01:21 2025 GMT
Subject: CN=8815f5f67cc386e248357669dfb7597909fdaa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:91:c6:8d:19:37:8e:7e:2e:42:f2:eb:68:
37:74:db:f5:0f:2c:9e:28:1a:4c:5a:ba:f7:26:12:
79:5e:af:7b:b5:96:06:29:d0:be:c7:48:62:44:e2:
54:1e:71:39:b2:bb:e0:c1:3e:f8:0f:a9:ae:72:e4:
5d:f8:7d:e8:06:f4:0c:8d:c8:da:5d:15:b6:5a:05:
f2:54:d0:16:f1:7b:e5:e2:14:36:a8:e7:c9:26:f7:
f3:f6:cc:db:fd:87:0a:39:e7:3f:8a:57:50:db:9e:
b7:51:c8:b0:dc:85:f6:74:ea:27:78:0e:8f:a0:2a:
37:24:c3:f6:7b:78:7b:db:34:dd:92:d7:57:7e:f6:
ba:55:8e:4f:fa:98:4e:72:6a:52:63:0d:da:75:44:
6e:51:28:e0:4c:4f:72:71:4c:4a:2c:9f:58:53:dc:
14:00:c3:47:90:a0:c2:aa:3b:70:c0:fa:2f:41:db:
41:b6:37:c2:ae:f3:87:14:a2:1f:7f:3b:1f:eb:0b:
cc:47:02:d8:55:78:17:59:85:04:80:f0:af:6a:c6:
d4:f2:78:f9:e3:6f:3a:7a:b0:d1:49:b1:73:f4:1b:
25:fa:72:e0:c7:98:0f:7f:ea:48:fa:44:03:92:25:
9d:5a:d2:f1:9a:84:5f:c6:bc:c6:6d:b8:20:91:9d:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:F5:F6:7C:C3:86:E2:48:35:76:69:DF:B7:59:79:09:FD:AA:26
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:79:b0:49:13:94:ec:15:f9:5c:3b:63:d1:3a:8d:4b:d5:12:
49:4b:df:f1:79:b8:1c:18:6d:f0:08:ac:05:64:a3:bd:e4:ae:
a2:b9:e0:b6:dd:62:bd:14:22:25:af:ff:fd:63:30:27:38:46:
8b:0b:25:66:7e:1c:31:73:0c:32:16:0e:3f:88:94:67:e4:cf:
f5:74:e6:a2:c0:b5:75:23:b7:c2:dc:f1:db:ab:ca:6b:61:70:
e5:5b:f0:41:4d:c2:24:dc:2a:d8:45:c4:b0:87:3d:ba:6d:9a:
ce:82:1c:53:40:25:ea:97:2d:ee:34:c3:ac:92:ba:fe:8b:b6:
98:ad:8e:e2:7f:d4:44:58:15:d6:02:ce:f3:f6:10:b7:ba:3e:
af:d5:02:36:7a:77:97:0e:62:85:db:7b:01:a2:15:8c:b0:3d:
f0:f6:8f:00:7d:e2:95:38:0f:0d:54:cd:c0:9e:b6:8d:b5:7d:
dd:94:e6:51:35:46:cb:14:9a:51:7a:24:08:18:58:c1:39:07:
0d:2c:c3:66:e5:a1:78:e2:06:00:df:e1:a3:75:f8:9a:c0:96:
58:ff:a1:6c:39:54:3c:a2:27:f8:21:43:29:88:04:cd:62:f2:
59:00:80:9e:e0:4c:21:b8:79:da:b1:a7:88:46:ce:e1:0e:48:
98:0a:af:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6R7+2Bpurd6elZGhqd+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTI5NmI2MGMwMzhjZGM2YmZlZjRjMDYwYjE0MDYxNjRl
Yzg2OGMwHhcNMjUwNjA3MTUwMTIxWhcNMjUwNjA4MTUwMTIxWjAzMTEwLwYDVQQD
Eyg4ODE1ZjVmNjdjYzM4NmUyNDgzNTc2NjlkZmI3NTk3OTA5ZmRhYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq12Rxo0ZN45+LkLy62g3dNv1Dyye
KBpMWrr3JhJ5Xq97tZYGKdC+x0hiROJUHnE5srvgwT74D6mucuRd+H3oBvQMjcja
XRW2WgXyVNAW8Xvl4hQ2qOfJJvfz9szb/YcKOec/ildQ2563Uciw3IX2dOoneA6P
oCo3JMP2e3h72zTdktdXfva6VY5P+phOcmpSYw3adURuUSjgTE9ycUxKLJ9YU9wU
AMNHkKDCqjtwwPovQdtBtjfCrvOHFKIffzsf6wvMRwLYVXgXWYUEgPCvasbU8nj5
4286erDRSbFz9Bsl+nLgx5gPf+pI+kQDkiWdWtLxmoRfxrzGbbggkZ3DuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgV9fZ8w4biSDV2ad+3WXkJ/aomMB8GA1UdIwQY
MBaAFA7ilrYMA4zca/70wGCxQGFk7IaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDkt
ZjVjODA1ZjAyNTViLzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDktZjVjODA1ZjAyNTVi
LzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXmwSROU
7BX5XDtj0TqNS9USSUvf8Xm4HBht8AisBWSjveSuorngtt1ivRQiJa///WMwJzhG
iwslZn4cMXMMMhYOP4iUZ+TP9XTmosC1dSO3wtzx26vKa2Fw5VvwQU3CJNwq2EXE
sIc9um2azoIcU0Al6pct7jTDrJK6/ou2mK2O4n/URFgV1gLO8/YQt7o+r9UCNnp3
lw5ihdt7AaIVjLA98PaPAH3ilTgPDVTNwJ62jbV93ZTmUTVGyxSaUXokCBhYwTkH
DSzDZuWheOIGAN/ho3X4msCWWP+hbDlUPKIn+CFDKYgEzWLyWQCAnuBMIbh52rGn
iEbO4Q5ImAqvjA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:32:39 2025 by rpki-client