Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: M5ttRM/eVFI8IgYuJEQCBCx/PWZdtinlElGPYm9iYHU=
Subject key identifier: 93:8D:FA:2A:30:2C:FE:A9:A8:BD:C9:E0:60:07:F5:63:55:64:4A:89
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 0196A0891FAE51AB86B2C5959711D653C29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 088F
Signing time: Mon 05 May 2025 13:01:03 +0000
Manifest this update: Mon 05 May 2025 13:01:03 +0000
Manifest next update: Tue 06 May 2025 13:01:03 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: J2g55e3FFdevhWV6gXX+NAkR2JUHnd0Nmkb8SkFnZXY=)
2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:1f:ae:51:ab:86:b2:c5:95:97:11:d6:53:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: May 5 13:01:03 2025 GMT
Not After : May 6 13:01:03 2025 GMT
Subject: CN=938dfa2a302cfea9a8bdc9e06007f56355644a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:8c:a3:58:ac:9a:4a:c4:72:11:50:61:67:
56:de:44:ba:e9:16:f3:6c:16:c3:00:b2:69:78:80:
6c:63:f1:c5:fe:93:15:80:6d:e3:d0:a6:8e:12:6f:
5f:06:cb:66:d6:34:61:20:12:90:61:90:43:bf:0f:
15:b4:c0:99:e0:bd:22:b9:56:55:d1:05:ea:1b:85:
35:eb:03:9f:57:dc:53:88:80:aa:5d:6d:80:fb:de:
52:48:be:c4:73:88:13:15:72:9d:7c:a9:d0:20:3c:
f8:d0:99:15:31:b3:9e:7f:5c:9c:59:d3:6d:b9:c6:
96:71:d5:61:40:12:6d:47:3c:41:2f:b4:97:16:90:
37:d1:45:e3:76:8e:33:89:65:fd:29:24:70:a3:1a:
b9:03:50:63:53:3a:f9:6c:e8:3d:dd:f7:6e:1a:25:
6b:06:48:6d:68:ec:66:22:71:a8:99:c3:c6:8d:0a:
9d:ce:7c:01:4d:cd:f8:33:cf:b7:3d:0f:3f:01:b3:
1d:9c:9c:1e:20:0f:a5:05:38:d6:0a:6d:39:7f:98:
9e:f9:aa:f6:e7:46:8a:93:4f:8c:74:72:43:4a:26:
19:95:bc:98:26:7f:21:2d:dd:e3:db:40:f1:d5:86:
22:34:b9:ce:0c:82:07:9e:f1:34:95:07:cc:50:4e:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:FA:2A:30:2C:FE:A9:A8:BD:C9:E0:60:07:F5:63:55:64:4A:89
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:73:62:51:7d:58:11:37:26:62:dc:dd:bb:a4:12:bb:8b:dd:
3c:7f:9c:2b:15:9d:94:ec:96:31:eb:ef:ca:8b:2f:68:d7:93:
f5:41:46:26:86:7f:78:18:5e:16:8f:18:d3:df:c2:51:75:ff:
96:fa:d6:86:87:9e:45:c7:a2:fd:71:5e:ca:1d:f5:01:30:30:
9b:25:09:d8:41:c8:a8:f5:3b:52:b4:39:44:0f:88:92:c9:cd:
8c:84:29:2b:22:c1:98:3f:fb:0c:2f:8b:b5:ae:d3:d7:5b:73:
3b:c9:7b:19:f8:79:e1:2d:0b:53:ff:d9:59:9b:5f:2d:bd:19:
27:60:fc:18:c8:12:b0:0b:c8:cb:92:2b:57:9d:7e:e4:87:92:
c4:56:99:b5:83:17:d4:29:be:fa:74:0e:5e:ec:e1:52:1d:af:
9c:1f:1b:61:a1:f2:34:7c:c5:43:9b:0e:87:66:67:13:b7:c4:
cd:ef:48:03:65:86:4a:e1:de:6d:71:23:ee:51:75:f8:cf:00:
94:bd:6c:ef:72:af:69:59:c5:5a:2a:4a:4f:91:a5:77:9f:c7:
18:75:34:b1:20:d4:23:71:fd:6d:cf:c1:a2:89:72:45:eb:6b:
cb:0f:a1:6b:0b:46:cb:f7:9d:aa:f3:8e:af:4e:49:e3:81:1f:
64:a9:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:33 2025 by rpki-client