Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: aywkR17UkG1iIndl1irMnIHhIasRQ8LymVlkEVqx8ak=
Subject key identifier: 31:32:7D:49:A0:0C:B5:53:6F:2C:12:AD:AF:3A:3B:A2:BE:8B:7C:2D
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019778D3CF30B8E182B1C0AED16FB5561C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 159C
Signing time: Mon 16 Jun 2025 13:00:36 +0000
Manifest this update: Mon 16 Jun 2025 13:00:36 +0000
Manifest next update: Tue 17 Jun 2025 13:00:36 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: QRVw5xpHEc01PBTTeZDWB/KcCwVIrdty7218nV5C848=)
2: yAlyRVhdV45Fhlz_SXSaEBYr95c.roa (hash: hbq+j/95NHgwMsXopbiJ/iZdMmpOcPkLx/w1fsKJD10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:cf:30:b8:e1:82:b1:c0:ae:d1:6f:b5:56:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Jun 16 13:00:36 2025 GMT
Not After : Jun 17 13:00:36 2025 GMT
Subject: CN=31327d49a00cb5536f2c12adaf3a3ba2be8b7c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:f3:27:11:a3:55:c2:16:91:28:f7:bd:b1:
46:60:ac:a1:85:46:6e:9a:f2:71:95:9b:39:8c:8f:
d6:82:6c:bd:88:03:17:fc:42:20:ff:54:e7:18:c5:
71:8e:c2:84:d7:37:05:64:4c:f8:df:9f:d9:e2:24:
bc:5f:8e:51:a7:78:e1:56:72:ce:d3:29:e8:32:f3:
98:1b:6f:ab:4a:2a:be:c1:3a:8d:19:ed:bd:73:6b:
d3:48:d7:98:fc:53:7a:fc:c5:e2:47:cf:53:fb:b7:
5d:e6:a7:a7:0b:83:b6:a0:e6:03:70:49:6a:1b:7d:
0c:11:69:74:c3:ad:8a:1b:08:57:71:98:57:c6:b1:
ef:8c:0d:22:2c:d8:95:b2:6f:19:9f:b5:f0:a3:47:
56:c2:24:42:02:11:80:c1:55:44:32:00:3f:7c:26:
30:96:bb:db:b6:9e:74:f5:64:fd:7f:23:de:a2:aa:
fa:cf:ca:43:37:b3:be:c7:e9:80:4e:8e:6c:a1:7f:
d0:de:cc:1f:22:f3:12:ed:b9:2c:ec:08:29:49:19:
a2:2b:ad:14:34:e9:f8:fd:00:f1:b3:a3:15:fb:7e:
2c:e3:ae:d5:4c:47:59:7d:86:60:aa:b9:4f:ba:ab:
4c:f0:6e:37:4c:fc:4e:14:40:fd:a6:92:cd:91:e7:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:32:7D:49:A0:0C:B5:53:6F:2C:12:AD:AF:3A:3B:A2:BE:8B:7C:2D
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:7a:eb:76:9b:60:ba:72:50:d3:9f:1d:d8:68:22:94:ef:
dc:6a:b9:03:65:01:39:58:25:36:85:45:21:d8:b4:ac:bc:34:
ec:29:ae:06:bf:f9:27:60:7d:d5:4f:26:64:3c:33:1e:19:b7:
4c:9a:63:fa:9f:3f:4f:bb:25:0b:1e:29:0c:e7:95:50:38:53:
85:2d:14:66:71:90:b1:d3:26:4c:65:b8:08:0c:0d:e9:f8:c0:
40:2f:8f:68:7a:2e:6b:4d:c2:6d:aa:1d:a2:50:7b:19:82:f1:
1a:3b:19:27:16:9d:06:2c:dd:3e:ea:ff:30:c6:dc:d0:16:8c:
ef:35:47:1f:d4:40:c2:23:1f:16:da:17:6f:08:18:89:cd:8e:
1e:cc:84:a5:92:4d:ce:6f:92:1c:6b:95:73:f7:15:2a:13:e8:
64:02:62:8e:b5:ff:4a:30:dc:77:4b:22:18:97:07:cb:f9:a4:
e7:f0:6d:6e:40:1a:c1:c1:79:bc:ba:fb:ff:16:d3:48:9f:34:
73:03:ce:b3:84:d7:f9:bc:ab:ea:5f:eb:74:19:33:70:71:ff:
99:0a:32:b0:40:3a:5f:e4:83:a7:41:e1:8c:14:5b:8d:7a:ec:
d4:db:ad:88:9d:ac:8c:d8:06:0b:45:31:37:df:71:98:7a:4d:
c5:c0:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:38 2025 by rpki-client