Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: 9tnB9337/i0hD8hfpEP8lBS0yazmbL+NihMz1SSvY6o=
Subject key identifier: 18:AB:53:94:B6:CD:0A:36:0E:D6:4E:38:C4:BF:81:1F:93:12:01:25
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 019779788650F9E0CD5B9FEB9F4312A2A543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0C2E
Signing time: Mon 16 Jun 2025 16:00:31 +0000
Manifest this update: Mon 16 Jun 2025 16:00:31 +0000
Manifest next update: Tue 17 Jun 2025 16:00:31 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: BlOAh0jz8V4UH48BGM/PzYBF/av9QoN437w3Pny1JCU=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:86:50:f9:e0:cd:5b:9f:eb:9f:43:12:a2:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jun 16 16:00:31 2025 GMT
Not After : Jun 17 16:00:31 2025 GMT
Subject: CN=18ab5394b6cd0a360ed64e38c4bf811f93120125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:b0:79:8d:03:e0:1b:85:b3:04:0c:0c:51:
10:c8:36:3b:31:65:04:98:e8:ac:a8:89:e7:1f:98:
11:ac:fe:db:69:ce:76:f8:85:18:24:87:25:f8:08:
c0:6a:33:4f:3a:2c:bf:1d:f3:52:f4:83:0c:94:3b:
46:7a:d7:38:6c:09:28:02:eb:c5:a3:18:c1:fe:26:
27:ba:3d:d3:b4:4f:d5:67:6c:c5:15:9b:0a:30:52:
86:f0:19:c6:17:b4:c2:64:4e:55:3e:aa:c0:b4:9b:
49:7c:98:b5:18:96:b2:dc:ff:f2:37:42:c8:62:4e:
8d:c6:1a:ef:2e:3f:cb:e2:2f:cb:13:4a:b6:06:17:
ca:40:bb:6a:c8:df:d2:af:bf:c2:16:7d:17:d0:e0:
34:73:bb:78:4b:53:3b:53:21:d8:55:0d:39:4b:7e:
f4:4e:bc:71:79:16:0f:82:8d:52:2b:c0:8b:58:bb:
98:3e:10:aa:3e:80:47:07:41:07:f0:b4:1f:28:b4:
76:1a:88:10:75:e5:d5:00:02:79:1c:56:0e:84:85:
5d:65:20:e0:af:04:af:bd:a8:c1:b6:fd:1e:0e:6c:
29:3c:b7:f9:f9:31:bb:41:2a:ad:63:c8:61:1e:be:
56:e4:d6:b0:90:ab:1c:2d:3a:c8:e4:b8:a1:d4:02:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AB:53:94:B6:CD:0A:36:0E:D6:4E:38:C4:BF:81:1F:93:12:01:25
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:56:7f:51:5b:00:f5:50:69:99:2e:9a:36:a4:26:c1:68:
bb:25:4d:2b:6e:dd:d2:82:64:28:5c:bd:92:70:2b:11:7d:45:
29:d0:b2:d8:81:f5:29:30:f0:8f:9a:80:9b:bb:eb:4f:f1:4d:
0f:20:1e:74:51:7c:42:81:b2:40:9d:e0:35:7a:1d:f1:82:6e:
d4:b7:98:e6:3b:95:0f:3d:f6:1c:95:4d:49:03:e4:c6:c0:1e:
e1:eb:06:53:14:6b:32:b2:c7:5f:ce:e1:b0:a1:08:30:a7:75:
91:68:bf:03:bf:37:88:33:54:f5:64:1d:54:f6:65:0c:c8:52:
ad:bb:4c:45:de:30:eb:ca:74:d1:85:e8:b1:09:89:4c:56:25:
2c:e9:a9:20:0e:f4:64:f8:50:e1:5c:b1:16:fa:60:75:7d:42:
d1:5b:8e:3e:4b:b0:3d:87:25:5f:a6:79:ad:52:70:92:0a:b6:
f7:24:75:d0:84:aa:f1:e5:5a:4b:b6:9b:9a:3b:25:a2:e0:f3:
96:b4:a9:a9:f2:18:f3:7d:80:7f:b5:f7:79:46:e4:6a:1d:18:
5c:b6:57:a0:c1:d3:e8:52:6d:05:99:63:0d:64:f9:8c:91:bb:
4f:40:78:7a:c1:56:94:36:65:8e:0c:ba:3e:6a:1b:d6:ce:d2:
3e:a8:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:39 2025 by rpki-client