Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: KoDEzsO+TIFJsr1WpU6u6c629/I7NdVD6hs3bBN0pxw=
Subject key identifier: AF:1A:F7:A2:36:E6:35:E5:28:6D:B1:67:1A:02:50:40:B8:BB:E6:5E
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 0197B70EDD5625D5AEAF0E3BF83427B50CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0A0D
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: H5TMtEybW86nIAr4TS1q6bc1WvsxF7cbMLnNV6xwcuo=)
2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:dd:56:25:d5:ae:af:0e:3b:f8:34:27:b5:0c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=af1af7a236e635e5286db1671a025040b8bbe65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:a2:50:c8:d8:46:49:54:7e:ce:fc:8b:fd:
e8:e1:10:e0:85:ed:5b:ed:2c:bb:b6:18:5e:4c:bf:
ad:a4:01:64:d9:8b:f2:41:f0:d2:f0:fd:b6:8e:75:
f8:0c:b8:5b:26:73:3a:a6:d9:5f:43:5e:bb:26:55:
09:4c:8c:e0:42:b9:d8:0e:e1:4b:d8:57:8d:27:19:
b1:6e:53:93:77:ae:aa:22:a7:e5:b7:4a:97:15:61:
26:2b:21:15:5f:28:28:6e:0b:e4:da:5f:40:f8:db:
3a:2c:10:10:57:12:5c:17:48:63:3c:d7:ab:0f:ab:
af:05:25:0c:ed:4b:4c:1d:8b:5a:ee:94:13:0d:d7:
67:82:40:52:cf:77:8a:02:a3:72:cb:cc:e1:1a:e4:
e1:ca:92:f1:02:6e:c3:81:8d:74:a8:b6:aa:2a:38:
7e:ce:c6:b2:f7:1c:ad:61:63:04:01:1c:ca:ec:5b:
80:c8:7f:5a:ac:20:b4:bc:51:58:2b:bc:d9:00:bc:
e4:d3:db:bb:8b:f7:b1:c0:44:ce:66:a5:74:a8:b9:
7f:9f:1e:ea:b6:7f:16:58:4d:51:ab:ed:33:16:a8:
fa:4a:1f:ad:1b:65:e3:fa:91:e3:a5:a3:27:4a:6b:
2f:26:cc:31:e3:ad:93:a4:9b:da:a4:0d:c8:e9:18:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:F7:A2:36:E6:35:E5:28:6D:B1:67:1A:02:50:40:B8:BB:E6:5E
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3d:c1:32:44:d4:e8:f4:41:1e:ef:89:66:ae:2c:11:46:e7:
2c:de:57:66:d6:9f:73:2a:c7:87:3e:7d:d3:9b:04:8a:9f:39:
10:59:e2:e3:e9:dd:8e:83:ce:d6:d7:ad:1a:7b:5e:a4:dd:1f:
61:85:19:dc:ae:37:aa:d6:6b:c0:57:e5:09:b2:3f:6a:27:d6:
fd:d7:99:be:d5:9d:93:15:cb:61:39:51:88:bc:06:27:e2:48:
61:ab:2d:a7:b2:75:4d:59:ae:60:57:b6:1d:9c:ed:72:e5:78:
d8:95:51:2a:21:9c:98:bb:15:90:c1:2a:5a:62:c7:2a:be:31:
4f:5b:8f:e4:b6:9a:4f:fe:d3:87:c7:dc:ad:ec:53:e6:38:68:
11:90:8d:f1:9c:15:5b:98:5f:c7:d2:f5:e9:23:58:51:dd:6c:
4e:f0:81:c1:37:e8:c1:5f:12:1a:7d:5a:e3:30:9e:da:b4:60:
69:b3:e9:1e:c3:1d:7b:c6:bc:97:ea:79:14:0e:7f:da:cb:34:
81:47:b2:f3:b4:a8:1d:1a:12:89:d5:75:b6:0e:3e:df:5f:62:
9c:03:a2:17:e9:70:86:e6:ff:59:7c:4c:3c:f6:b0:1e:a0:d1:
4e:0d:7b:9a:7f:bc:15:ad:e2:b8:98:f8:4d:9b:83:90:60:9a:
50:53:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:32 2025 by rpki-client