Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: HbNRFlCdIRe96nAJn66lhRX58UcZoOT46Ib8bxGGfIQ=
Subject key identifier: 58:D1:E9:67:71:08:D9:52:04:9E:3E:45:F6:1E:43:7A:C5:38:C3:F2
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 0197B70F3ACCEF0808F0CD18E2425C573364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: UpYOU56t+iuZKjmLYuTYIQhvjdZfEPUMX3Xny7a140M=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3a:cc:ef:08:08:f0:cd:18:e2:42:5c:57:33:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=58d1e9677108d952049e3e45f61e437ac538c3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:7b:70:00:0b:52:e4:20:96:89:de:a8:34:
f7:68:fe:58:27:2d:36:20:47:9a:92:e1:65:53:b2:
9c:5a:a8:78:50:f3:47:30:ab:ae:8b:8e:07:42:2e:
e0:55:84:cd:eb:18:da:bc:f0:36:e4:8c:a4:e0:ce:
f8:38:59:14:90:8e:e8:14:4c:c1:56:f0:28:e4:7c:
45:12:6f:3b:90:33:a1:b2:f0:86:af:af:2f:2c:8d:
bd:fe:ce:5f:f3:b0:6e:bf:c9:4d:12:c1:d9:d0:60:
6a:93:82:e1:c6:b6:cf:4c:54:14:1b:4b:bf:6f:60:
9f:14:d7:b1:08:eb:11:93:05:b1:e3:7f:32:17:24:
8f:27:2b:52:74:3f:6f:5b:53:83:c2:96:6c:10:53:
b3:9c:76:48:74:2e:fa:7b:9c:39:9c:5e:e0:94:65:
71:c1:fd:3b:5d:35:8c:2c:55:d5:34:bd:c0:fa:57:
cb:04:a0:6a:bf:83:a7:1c:6d:65:58:84:a8:9d:93:
05:49:05:ab:64:90:a2:41:0e:d6:4b:90:00:ad:99:
e5:5d:6e:8d:ed:57:07:0c:51:c2:05:40:3b:d5:e2:
f3:25:9a:19:7d:ab:99:7e:3f:0a:43:e0:a7:b0:74:
22:03:4a:70:4a:17:c2:34:6c:fb:11:82:ee:f8:0d:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:E9:67:71:08:D9:52:04:9E:3E:45:F6:1E:43:7A:C5:38:C3:F2
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2a:04:8d:57:d0:bd:d8:e9:44:02:38:ab:01:2e:58:dc:a9:
3d:68:ba:f1:4d:4f:99:0e:c2:56:3b:f4:cd:6c:5f:8f:43:a0:
72:f0:45:0a:cf:a3:4f:f7:92:5f:08:52:93:04:12:7f:23:e8:
8e:a4:c9:7f:41:b4:5e:22:63:29:dd:d9:e0:b3:a8:6a:8c:b6:
3e:87:8f:b9:92:54:83:9a:36:59:36:3c:bc:f3:09:f2:b1:a1:
17:a7:56:06:1b:f0:7a:b6:1e:d9:2e:5c:11:29:dc:df:bc:82:
31:b2:6e:87:a0:60:f3:b9:23:ed:79:d9:01:ae:09:8e:c8:68:
2c:5b:76:23:0d:6c:af:dc:d5:fb:96:45:64:ac:83:51:18:ac:
62:31:0b:4d:f8:80:74:2c:90:52:26:76:ce:9a:43:0d:cb:b7:
81:25:3f:31:c2:77:85:8d:de:0d:88:82:cc:12:42:10:5e:22:
f8:df:d0:05:86:3b:95:5b:6c:db:6d:1c:a4:f7:cb:a9:a6:a3:
8d:01:2b:59:84:a5:ad:a4:d5:34:f3:32:d1:59:ed:80:66:eb:
3a:c5:f4:c7:f4:ae:00:70:fd:4d:d9:1b:c9:c0:08:4a:81:5b:
4f:73:a6:aa:50:07:ba:6d:3e:c4:5a:fa:5b:39:c3:8e:e6:d1:
78:84:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:27 2025 by rpki-client