Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: VYLmW6oRz1zsc3dObvuLj3Dn1kIv/OG0BVTaoeYjfl8=
Subject key identifier: 0D:89:A7:9D:D0:83:C4:13:1B:D4:F7:90:7F:3E:07:12:1A:1E:4C:61
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 01976D3D76C76282BAA65F199BD7887063B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 07:00:33 +0000
Manifest this update: Sat 14 Jun 2025 07:00:33 +0000
Manifest next update: Sun 15 Jun 2025 07:00:33 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: RngBEigwudZqLNG+YYdafQ/nQhVrXKeKHIya1/Q9wJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:76:c7:62:82:ba:a6:5f:19:9b:d7:88:70:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Jun 14 07:00:33 2025 GMT
Not After : Jun 15 07:00:33 2025 GMT
Subject: CN=0d89a79dd083c4131bd4f7907f3e07121a1e4c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:77:74:3b:2b:aa:4f:55:09:1d:b1:b0:25:
a1:e7:7a:af:53:a1:db:5c:99:48:e5:6a:a2:52:86:
9d:ed:de:cc:9d:f8:61:07:97:47:b7:b1:41:d3:48:
31:a4:53:8b:34:2c:2e:49:56:65:4e:1b:95:aa:23:
9a:d2:bd:61:69:cb:3f:da:fb:ed:15:fc:fa:e3:8c:
11:48:d5:68:bb:c7:c5:3f:4f:62:0c:32:f7:2f:b2:
bc:3b:54:b3:ce:72:8f:ab:b6:e7:6b:2f:8f:04:99:
9b:33:ff:18:57:66:b0:4f:78:96:25:cb:29:d2:14:
5c:83:4b:a3:a3:5b:27:a8:e5:fe:c0:6b:44:be:67:
a2:ae:bd:8c:4c:b6:4b:79:95:38:d6:f2:82:55:18:
54:7f:5e:f4:ac:1a:b0:02:65:31:9f:55:a7:21:24:
e5:11:44:c8:ee:67:37:55:86:5e:5f:f9:01:27:06:
1e:12:e5:75:f5:a2:0c:ca:a4:e5:7f:2c:17:3c:53:
c9:75:34:83:db:cb:5e:67:24:e4:2b:c8:7a:e3:8b:
cf:5c:0b:84:1a:8b:cf:69:32:fa:68:50:51:a8:24:
67:90:4d:c1:fc:2e:be:fa:23:37:9c:f9:0a:68:bd:
a5:eb:12:99:dd:69:a2:67:6a:ab:66:d8:1b:70:37:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:A7:9D:D0:83:C4:13:1B:D4:F7:90:7F:3E:07:12:1A:1E:4C:61
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5d:46:42:9d:dc:94:80:aa:0c:1c:61:54:43:5e:c4:48:1d:
1e:50:be:cd:f1:7d:7d:55:2c:1c:fa:c4:5b:07:cb:a5:56:96:
ed:76:ec:af:93:4d:24:d0:e2:e0:36:c2:2d:85:96:40:9f:b9:
fc:dc:50:15:7b:78:5e:ee:d4:85:5f:0f:4d:7b:3d:4d:98:0a:
3a:93:0d:90:6f:f8:63:74:67:99:05:bd:5a:09:4c:01:1f:97:
6a:9e:17:9e:cb:ac:d5:56:04:fa:2c:95:a1:6d:52:55:f0:1e:
f5:55:64:4c:dc:77:98:07:93:9b:48:2b:52:d2:55:02:55:50:
ce:09:a0:ca:6c:d6:ba:dd:fa:3e:9c:79:5b:39:e4:e1:df:39:
02:a7:79:75:28:2f:37:3e:4d:26:9e:d2:1f:4d:72:51:ad:99:
91:b6:e5:7c:6e:c9:c6:19:5d:5b:0b:b4:c2:60:78:9c:79:8f:
fb:c6:59:5a:15:52:55:97:77:ef:de:5e:fe:63:c2:a6:83:6a:
09:34:b3:69:9c:88:b3:1c:df:11:0a:dd:02:2f:9e:c0:d8:cb:
63:ce:a0:50:be:1c:ef:94:74:8f:d1:9b:d5:02:93:7f:99:c0:
9e:96:91:c7:ba:96:e4:6b:7b:7c:58:aa:f1:75:90:d7:52:0a:
0f:6c:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:26 2025 by rpki-client