Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: vDU1RszynwAqrJOiFzuyeSeiT9wdhoNRGXEHFlDiOkQ=
Subject key identifier: 08:8B:55:28:68:C7:60:90:48:E0:96:7F:96:A5:9F:CF:08:59:23:FD
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01976F9A39A8C1654D5CF83DACC79843868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 18:01:07 +0000
Manifest this update: Sat 14 Jun 2025 18:01:07 +0000
Manifest next update: Sun 15 Jun 2025 18:01:07 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: yHjmzfqRmDd7qNMI577Uf7rHyiIL4btCOrBqJcYIPWo=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:39:a8:c1:65:4d:5c:f8:3d:ac:c7:98:43:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jun 14 18:01:07 2025 GMT
Not After : Jun 15 18:01:07 2025 GMT
Subject: CN=088b552868c7609048e0967f96a59fcf085923fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:7e:76:45:14:a5:c1:ea:f1:c0:18:b2:e4:
bc:fd:65:24:9a:ae:05:a4:00:6c:40:00:5e:44:7d:
83:b0:e4:ad:83:e8:0a:f2:e9:19:a4:28:71:f9:9b:
2d:84:84:5e:66:52:2a:0b:50:5b:8c:6b:a8:b5:0a:
76:b6:27:46:9d:64:06:5a:ba:b3:f6:58:73:d8:8a:
4b:5a:32:1b:7f:b7:09:32:3a:ca:aa:10:dd:0c:df:
36:f5:29:47:b2:86:ae:68:f1:fd:51:6b:3a:32:e1:
37:01:df:21:0e:e8:73:e0:76:61:55:2a:22:c8:b2:
65:69:ff:e7:86:ef:fd:37:38:43:8a:30:89:cf:77:
a2:6b:7b:6f:b3:a3:bb:d1:a6:1b:c2:df:64:87:6e:
00:12:e8:6f:cf:8c:37:a5:3d:e9:2f:98:b0:4d:e3:
94:83:0a:dd:1d:fb:09:c1:26:ce:7c:82:14:b3:f6:
47:53:21:09:52:e3:dc:01:f2:62:ac:18:65:17:71:
d2:3c:6f:52:86:0e:51:88:7c:5e:43:e4:41:05:05:
03:34:3c:14:8e:ec:b0:18:33:bc:36:d5:8e:b4:16:
80:8b:9a:34:5c:d3:98:ee:25:75:3d:d0:4a:d8:b1:
97:06:dc:be:90:20:66:7f:4e:83:ce:61:a4:7e:46:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:55:28:68:C7:60:90:48:E0:96:7F:96:A5:9F:CF:08:59:23:FD
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:19:dd:c6:c9:64:97:e6:f5:55:e9:74:71:1c:34:69:72:
2a:30:0c:61:fa:d6:21:c1:53:e4:89:12:73:16:e1:3e:1b:1a:
c0:9b:42:6a:2c:55:9f:52:71:1f:c8:b0:e3:01:d1:7e:3e:a9:
8b:b3:35:03:92:3c:cb:09:dd:10:ad:70:93:72:22:20:9b:29:
97:7d:00:bf:cf:38:e3:11:3e:c8:c9:2c:ed:a1:cd:9c:3c:3d:
c6:59:74:8e:79:a4:ea:55:8b:dd:74:7c:62:1b:77:5a:1c:5f:
27:9d:03:16:05:89:c0:35:6f:e2:e7:6a:b0:02:39:f3:03:ad:
ec:80:7a:a7:98:17:ff:52:db:6b:8e:e5:e4:26:7b:c5:17:4d:
d6:78:b3:ab:f8:fd:9f:f5:16:b3:7d:d7:ad:80:fb:60:f9:67:
ec:8f:ff:de:56:33:86:76:8a:31:9d:45:b8:02:34:92:8d:1b:
f8:67:5f:aa:c8:be:f8:77:18:4f:cc:e3:e8:fd:b2:a5:10:07:
fd:a4:12:b0:c7:20:e2:d7:28:ea:b1:21:f8:7f:fe:8e:31:a0:
fb:a3:1a:bf:35:83:91:0b:19:88:59:62:c3:05:70:ed:24:0e:
0d:d7:01:0d:16:0a:c9:30:0c:c1:7b:6e:3d:7b:b2:28:f8:b8:
ce:b5:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:34:56 2025 by rpki-client