Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: 1ICXY9pUHaT5JFLXVRkVr92PuOzF9AMoHkEeun5zZPI=
Subject key identifier: CF:4D:0F:E6:C1:16:AD:F9:14:39:17:AA:4B:27:7C:39:11:ED:41:AF
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 0197B7EA978686151612135CFE23C6584572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 11FD
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: k1ELIVEnKsGCuQpVTBtLh9P23VB6GYRPoOUocu4GpHo=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:97:86:86:15:16:12:13:5c:fe:23:c6:58:45:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=cf4d0fe6c116adf9143917aa4b277c3911ed41af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:3c:af:28:2f:b5:9a:c8:f2:21:43:81:ad:
68:7f:5f:92:6c:7a:d3:28:6d:a1:fb:bb:25:59:b6:
5c:b7:87:5b:31:06:4c:b4:15:76:f8:b3:69:7f:23:
47:85:07:76:bf:c0:e5:b6:fa:6d:fa:89:da:bb:9a:
4c:a6:32:52:3b:a9:b1:a3:e7:26:cf:b3:e8:58:98:
c1:4f:4c:b2:38:2d:65:00:3a:e1:e5:47:41:f8:11:
45:96:77:aa:1f:69:e7:af:2f:27:4b:c4:da:14:98:
f1:ce:90:07:8b:8e:98:4a:56:65:3a:df:94:b1:fa:
40:ff:ff:d6:7a:2b:f7:36:82:02:b1:2d:32:d5:21:
a7:ab:1e:0c:a9:88:4c:2e:d9:a0:34:ba:fd:fb:f3:
a9:36:3b:7f:45:dd:3d:b6:2b:8d:56:b9:93:e9:5d:
29:59:11:de:a1:47:23:60:40:b1:ec:f2:eb:12:b5:
36:fe:e5:98:57:e7:2d:4c:c7:bb:53:50:4c:11:1e:
12:ea:04:63:54:d5:d2:c1:32:18:f7:c2:40:a2:9b:
24:bb:c1:05:39:dc:77:52:f5:87:5e:50:21:1f:ec:
50:92:aa:45:c6:e6:4d:9d:4b:66:06:0d:50:41:29:
1f:8d:38:5e:7b:b6:59:23:c8:c3:31:73:05:ab:e4:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:0F:E6:C1:16:AD:F9:14:39:17:AA:4B:27:7C:39:11:ED:41:AF
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:44:27:24:70:80:af:42:f0:0c:d8:b1:1f:2d:d2:2a:21:d1:
d4:39:b6:0b:ba:1a:b0:8c:92:98:97:1b:bc:2c:4a:b9:be:94:
ea:77:67:f1:e1:24:ac:de:1a:aa:63:e2:6d:70:ee:83:59:0e:
96:cf:a7:1d:5b:36:19:f4:2b:0b:92:82:09:db:ae:bb:08:ed:
16:f6:1b:b6:19:2f:cf:42:57:c5:eb:19:81:a5:06:c0:7e:01:
5a:45:05:1f:d0:8e:48:f5:80:19:a2:e8:7e:a2:27:b0:66:7a:
1e:8d:c7:85:eb:57:92:19:33:53:04:50:ff:1a:5e:f0:33:6b:
b1:24:0d:23:39:b1:24:c9:89:0c:82:47:96:3a:f9:ef:22:a8:
2c:9c:c4:77:f8:c4:66:83:2b:f2:b4:79:90:66:79:29:5c:cf:
76:f3:35:06:bf:43:c9:9f:b0:19:1a:1f:23:51:62:cd:18:db:
30:83:f7:f7:c4:00:ff:6b:c4:dc:61:0d:8d:1e:67:41:34:09:
25:ef:bb:c7:f4:cc:ea:cd:79:5a:0b:ab:76:88:54:c0:bf:cf:
e8:04:66:96:37:7f:19:6f:14:ee:4c:34:3b:88:31:74:3f:22:
6f:52:e5:ce:35:56:89:e6:ae:2f:0e:4a:7e:73:59:a6:da:03:
51:fd:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:35 2025 by rpki-client