Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: kt0c8OyhB7xBXwN9aHxTyZzYwEAGOQPHmYhfOEUK+fs=
Subject key identifier: 2C:71:C8:5C:D7:59:37:4A:15:B2:E5:45:D1:62:56:71:69:26:E0:CC
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 0198D4E0ACF7C207346D0FAF1586E4A37B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: dgT7T5x7ysb8ffZbS9hVxDPwUUY0P05z1xkjlCbXafE=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ac:f7:c2:07:34:6d:0f:af:15:86:e4:a3:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=2c71c85cd759374a15b2e545d16256716926e0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:41:fa:3b:76:60:c5:ef:ee:25:ac:a8:de:
e3:3c:f7:ca:9d:78:b8:85:37:54:9e:41:67:4f:f1:
67:10:4d:39:74:0e:03:58:15:11:68:5f:9c:94:e6:
bd:dc:df:e4:7b:22:72:7f:02:97:8b:76:de:29:3f:
fd:88:f0:92:aa:bb:df:e1:f8:0b:af:fc:7e:1d:b8:
ee:ec:5b:f0:61:e2:4a:18:52:f4:20:6a:02:51:b1:
0d:ea:08:f3:ad:19:2b:04:8b:93:58:9b:99:0f:ca:
23:c2:09:29:03:b1:6c:d9:26:d6:c6:84:bb:52:bd:
2a:5b:bf:09:07:98:31:2f:e0:15:e7:13:c5:62:ee:
35:25:ff:5a:bf:b5:90:f7:ba:b2:61:3a:8d:27:54:
1a:be:cc:a4:a3:b7:63:af:40:f6:33:3c:83:b1:1d:
2c:53:31:d9:13:d1:43:b9:95:79:bf:3f:48:f7:30:
d4:44:57:26:b9:b2:20:7e:7f:9d:e8:9d:3f:6c:0d:
98:c8:48:54:af:e0:6c:39:06:47:e7:f5:13:25:a0:
f7:6b:97:ec:34:55:08:80:00:ae:99:70:2d:22:44:
2b:87:30:a5:11:3c:76:f9:2a:2b:d5:72:e8:2a:b7:
38:f7:49:49:9f:87:e9:6c:1e:a4:22:f5:f0:22:f0:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:C8:5C:D7:59:37:4A:15:B2:E5:45:D1:62:56:71:69:26:E0:CC
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:49:1d:c8:41:62:eb:75:74:f5:66:71:c5:48:98:35:06:13:
47:9d:27:b4:0e:9f:9f:d0:6e:9c:57:1c:0f:ec:e7:7b:ce:6f:
89:eb:bf:83:1f:d5:c3:48:83:d1:cd:d5:3c:e6:43:9a:29:61:
55:3d:cf:ad:63:67:eb:0a:89:53:82:2e:49:19:61:73:d3:3a:
9b:6f:a5:5a:ac:28:52:c9:5b:ff:19:fb:ff:1f:f0:02:c1:ca:
95:41:04:9d:37:2a:3f:ff:78:9e:30:02:7e:ee:b1:ec:b3:4e:
b4:33:50:0b:f2:b7:13:4c:0e:c3:84:26:4d:45:59:d2:d0:58:
39:b2:04:58:5b:ab:1e:db:7c:16:8d:9a:ab:b8:24:19:f1:72:
48:a2:00:b8:98:19:3d:92:ae:e5:d6:59:f8:76:c9:fe:33:7b:
a8:83:51:fa:9d:4c:fb:70:02:78:25:b9:f6:6f:37:ec:7b:10:
e1:43:58:61:9a:e4:9b:9e:90:4c:ef:09:27:63:ab:62:f0:3c:
d1:01:e8:7c:1b:04:67:b4:ab:c1:7d:79:4f:a4:71:52:ff:21:
f7:1a:fe:c7:7f:66:18:23:3f:08:20:31:2c:c2:60:10:fb:5d:
fb:83:37:7d:6f:df:c5:fa:35:d1:93:97:79:ed:ad:59:f8:c1:
d5:ba:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:11 2025 by rpki-client