Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: Jg/5Voc+oFMbr8c5GTOt9Xkev2fDKZXoLABrlf/DmlE=
Subject key identifier: 40:7F:DF:30:6C:94:70:D9:D4:90:15:C2:06:D4:E3:EC:CF:CE:0C:95
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 0197B70E87A6655602B9DC16BE837F33A3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: 8w3BrV4v5bj8puZtXjwUBlMS7b1s620HdMJx0ljonso=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:87:a6:65:56:02:b9:dc:16:be:83:7f:33:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=407fdf306c9470d9d49015c206d4e3eccfce0c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:4d:1e:a5:fb:97:bb:48:68:28:c6:62:40:
fd:05:53:94:38:0c:95:3c:42:ab:2d:c7:e0:b4:2e:
5d:03:4f:21:a7:9c:a4:0a:7e:fe:1f:2d:ed:f9:a4:
e9:71:70:d9:ea:70:c9:28:06:c8:9e:ce:b5:29:57:
0b:0e:1d:e4:e7:c6:0b:ce:5b:e5:40:53:32:fb:11:
94:0a:31:58:2c:59:47:a7:c1:4b:10:3f:0d:6c:0a:
7e:28:b9:c3:84:2d:9f:2a:09:d1:fa:54:a3:10:80:
18:ba:ca:7c:1a:81:e4:0d:10:d9:7d:4c:3c:74:3a:
65:92:fb:9d:d7:43:0d:87:b5:72:a5:a7:78:bb:9a:
ab:c3:0f:53:b1:b1:b1:ab:e0:22:99:34:9b:80:55:
ba:b2:0a:b1:19:fd:9c:ab:82:0a:a7:f5:4e:79:dc:
0a:45:53:0a:41:fa:72:d3:8e:f0:dd:fb:e8:7d:a8:
47:70:42:bf:79:6a:f4:92:fa:97:48:7c:e0:fc:9f:
ce:eb:24:46:7e:91:03:8a:18:ec:ea:26:e1:a3:0e:
3d:39:e4:64:f9:48:61:ef:6e:e8:ee:b9:62:8e:00:
b7:51:19:19:e9:0f:3d:bd:f6:33:bd:6f:5e:2a:09:
02:a6:30:0b:88:e2:50:a6:31:04:00:2d:67:cd:f2:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:DF:30:6C:94:70:D9:D4:90:15:C2:06:D4:E3:EC:CF:CE:0C:95
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0b:aa:bb:32:48:ad:84:af:45:4d:17:51:2a:ba:eb:fe:d6:
3a:82:ec:ab:d2:7f:ea:ed:47:79:ae:1c:73:a0:08:a5:83:57:
fb:a3:5c:b9:7e:02:bb:b0:b1:d8:ba:20:43:9c:d4:95:16:c6:
a3:20:52:d7:eb:d7:57:66:62:30:52:d0:29:c5:ad:f3:c0:be:
aa:c2:a7:62:9a:26:88:9b:c3:b7:01:81:c3:ea:17:9b:9a:fd:
87:15:24:17:dd:8c:a7:fe:7c:2e:c8:9e:db:77:e7:ef:cc:0c:
81:04:8a:17:9b:cb:7d:98:5a:2c:a0:cd:06:37:f1:82:5e:8b:
4e:69:f7:d4:22:a0:1b:b4:00:b9:6e:74:64:43:69:c6:af:aa:
f4:3a:15:df:d2:e0:6c:c9:c8:13:76:ff:fe:7d:ac:51:d9:00:
75:69:2b:2a:ba:80:ea:41:01:3d:85:a4:b3:e6:a6:7f:ae:f1:
c5:e0:98:46:12:37:e5:ef:19:76:7f:95:8a:3b:9c:4e:00:4b:
d7:80:a7:e4:3d:5b:ef:09:06:8d:35:87:65:ed:7b:de:ef:64:
e0:e5:1b:3d:1b:56:f3:8a:70:e2:2f:9c:49:28:81:4b:e8:1d:
b9:58:02:f2:6e:70:96:a2:92:c7:dc:d4:b3:0b:cc:6e:80:a9:
c6:2c:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:25 2025 by rpki-client