Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: n2+RmPD3U8tv7P7Hl1g7VN0Evp9awJP/FharrGiN5/Y=
Subject key identifier: FC:9E:86:75:C1:B3:77:64:BD:9D:E4:B1:C8:50:65:98:3C:02:06:C8
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 01977FE8F787E8FE01BF854ABAB46891F116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 22:01:03 +0000
Manifest this update: Tue 17 Jun 2025 22:01:03 +0000
Manifest next update: Wed 18 Jun 2025 22:01:03 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: cUSNiu7RUmgJdk+N+uhCRO1iigka7t/XvmB9YQrl9jw=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e8:f7:87:e8:fe:01:bf:85:4a:ba:b4:68:91:f1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Jun 17 22:01:03 2025 GMT
Not After : Jun 18 22:01:03 2025 GMT
Subject: CN=fc9e8675c1b37764bd9de4b1c85065983c0206c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:01:a8:b2:3b:55:ac:59:fe:14:9b:8b:58:
f1:b9:3c:61:d2:c2:1f:03:18:57:16:6f:c2:23:cf:
3d:84:93:26:0f:77:42:bb:7e:58:29:c0:33:c7:d4:
d6:82:a0:9a:2c:83:66:23:85:f2:ae:2d:53:ff:78:
6b:c9:7a:b3:82:1a:44:d2:82:10:b3:03:17:1d:14:
0f:19:bc:cc:8c:ad:5d:f1:4f:6d:ea:7f:79:be:71:
68:11:8a:5b:9b:54:bf:94:0a:22:80:99:37:45:da:
89:49:d4:87:e7:35:8d:36:d5:3b:24:4f:b3:91:2a:
37:1e:96:8a:a1:e2:81:ed:e6:cd:53:25:07:c9:31:
79:23:7a:cc:13:72:91:f5:1f:f4:93:0a:4b:2c:f5:
32:af:a3:b0:da:76:dc:b3:78:6e:16:e9:50:54:d2:
e7:1a:e5:05:d2:9b:d3:1e:ff:1f:48:d1:34:35:09:
d5:f2:2c:96:73:36:98:d4:05:4f:3f:cc:3b:ab:ec:
31:c4:b9:50:09:94:e5:90:60:e8:ef:35:a2:39:2d:
ce:d0:f5:ab:1c:5a:c9:de:9f:39:78:76:61:85:96:
57:ea:6c:2f:1a:38:e9:bc:2f:f3:06:1b:8a:08:6a:
e9:2c:29:4b:4a:62:79:0d:67:46:5b:da:f6:89:09:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:86:75:C1:B3:77:64:BD:9D:E4:B1:C8:50:65:98:3C:02:06:C8
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:20:c8:9a:14:b0:cc:be:17:f3:eb:da:0f:4b:cf:52:d9:ce:
a3:84:1c:32:ce:0e:ef:cd:41:03:a3:98:dd:50:63:ee:c4:98:
2a:4f:02:dd:e6:e1:90:9b:2d:1a:b9:5f:f7:59:15:7c:7b:cd:
bf:33:b9:43:1b:0b:60:60:45:97:a8:c2:53:04:57:44:dd:56:
3b:29:d4:49:85:40:e2:df:b4:f6:bd:d0:ec:a3:2e:d6:c7:95:
1c:6f:ec:d4:96:21:b0:25:d8:41:ab:cb:82:b4:c8:a2:ca:2a:
c6:e3:26:71:ea:e1:21:d7:66:22:3e:0b:ea:2e:29:14:9c:f3:
a7:57:4f:80:81:be:d4:d4:97:1f:0c:56:38:dd:84:b2:46:26:
f0:ca:60:12:9e:0c:7c:57:79:64:6f:6a:0e:2d:8b:9e:81:0e:
7b:52:54:b4:d8:91:72:78:ec:fe:ce:c5:52:36:da:44:91:3b:
8b:38:82:fc:ba:25:92:a5:ba:4d:1b:fe:2f:0c:25:6b:1f:ec:
4b:5a:dc:b7:e4:19:09:72:3e:16:66:4b:8a:35:71:a4:0d:1a:
c3:c8:78:5e:e2:f3:39:1e:d6:74:4a:2b:9d:5f:62:bf:af:12:
ab:fb:4e:1c:1f:a5:01:1a:37:c4:68:f7:5d:68:3c:f9:0f:5f:
37:a4:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:31 2025 by rpki-client