Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: PnF6w3Km2oZYET+lbD5jfSUPAI/KsksdFtxKOnrM0rg=
Subject key identifier: 1F:69:78:36:E5:85:B0:8C:41:A1:5A:A7:53:6C:6A:72:4F:9E:C5:0D
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 019770759C5E07356EBE3F76038C7B2CB602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 11D8
Signing time: Sat 14 Jun 2025 22:00:45 +0000
Manifest this update: Sat 14 Jun 2025 22:00:45 +0000
Manifest next update: Sun 15 Jun 2025 22:00:45 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: 2wBr3USEidTs/D9/yoR9Z9VLnIVPH/6IoF2kD0q+M9M=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9c:5e:07:35:6e:be:3f:76:03:8c:7b:2c:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Jun 14 22:00:45 2025 GMT
Not After : Jun 15 22:00:45 2025 GMT
Subject: CN=1f697836e585b08c41a15aa7536c6a724f9ec50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:5c:89:c1:a2:76:bc:4f:76:79:89:cc:5e:
ff:0b:ae:d5:2f:91:36:de:5f:4f:d2:5f:b5:5f:f3:
a4:8a:89:83:63:cc:11:4a:cf:f3:f2:c4:b3:cb:fa:
44:f4:c3:a6:c8:53:6f:26:d2:34:75:c8:69:86:a2:
0a:b8:37:89:03:0f:9a:61:08:f3:6e:0d:50:d9:1f:
95:c3:4a:79:23:3a:8f:98:57:71:e4:4d:36:cc:73:
39:18:4e:b1:82:62:39:33:c3:9f:fe:3d:a1:40:df:
5d:68:2f:76:cf:e3:19:c0:b3:c4:a6:5b:95:1c:39:
e1:6d:23:63:c1:17:08:cc:d6:fb:03:6d:d1:68:e0:
91:4f:35:9b:7e:61:96:ed:78:af:c1:5e:34:ff:03:
c9:0b:84:e8:36:08:db:2c:b6:bc:d2:de:1e:ba:32:
fa:24:31:41:66:f4:68:30:61:6b:78:13:70:6e:c6:
74:54:a1:61:60:3c:3a:df:ef:4b:4c:97:17:79:10:
60:f6:27:fc:f5:e9:15:b1:3c:a6:f4:c3:33:d4:ce:
08:04:6e:b0:72:c5:8c:96:ed:b2:8c:c8:5b:30:b9:
a0:a1:7d:38:ed:6e:3e:e8:10:2f:c7:22:a6:d4:54:
cf:d3:ec:f0:80:9b:46:19:2d:ec:b0:67:be:3d:f0:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:78:36:E5:85:B0:8C:41:A1:5A:A7:53:6C:6A:72:4F:9E:C5:0D
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2a:8a:8e:9f:65:8c:9a:1c:dc:8b:f2:1f:ca:82:c6:df:a0:
a0:e4:8c:4a:4a:77:8f:0f:60:1a:d8:0a:5b:64:a4:e9:05:f8:
ac:b5:b3:01:46:66:a3:6d:cb:7f:4e:ea:7f:7f:c0:f8:8b:24:
20:61:de:f8:a0:93:2d:60:1e:6f:3a:26:28:60:e8:02:2c:9e:
dd:42:11:a0:55:2c:13:7e:53:1e:86:63:88:94:fc:a3:b2:4b:
62:53:10:5d:9c:1b:8a:87:7d:46:ae:89:63:bd:28:75:14:88:
9f:c8:06:a3:a7:dc:7d:6e:39:d2:c9:0d:46:8b:a0:db:8e:e4:
e5:e6:f8:3b:fe:6f:de:64:b6:33:0b:6a:c0:a1:74:05:96:75:
25:f5:21:c8:63:56:a9:31:77:10:ec:18:5d:3f:76:fc:50:5a:
0e:e1:dc:42:28:94:6f:7f:1f:14:11:09:cd:14:4b:39:9c:34:
6f:84:28:5d:8b:10:39:d2:5c:5a:13:cb:6e:17:65:c0:68:0e:
62:0b:1a:41:5d:88:30:bd:33:84:3e:97:cb:c8:b8:d3:1d:b8:
72:27:a6:83:e7:c0:e9:55:6b:24:b6:f1:dd:50:bb:19:7a:2a:
49:eb:bc:4e:80:b9:30:31:aa:a5:fc:3c:8c:a2:ef:0f:d4:9d:
47:36:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:17:19 2025 by rpki-client