Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: bXr3+xL45SMqkZ96wb2Om0m0TR89nNq2EhsWiNHZWXo=
Subject key identifier: 36:25:56:42:12:BF:D9:18:D5:8D:B6:D1:B3:CD:FD:2C:98:4A:AD:B7
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 0197B6D79B14D96F05EBFC235EC510A849FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 063C
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: vejeCCW9TMmdXNvmEB+UNTi17ILtvgm8MNAkJewNXlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:14:d9:6f:05:eb:fc:23:5e:c5:10:a8:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=3625564212bfd918d58db6d1b3cdfd2c984aadb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:9f:2b:64:5f:35:90:ac:7f:40:74:6f:b2:
46:c6:74:83:ca:ec:cb:e7:24:10:fb:9b:d9:4f:20:
bd:ad:87:e8:06:7f:50:3e:ec:9f:10:50:93:ee:5c:
fc:1a:33:be:bc:22:a8:f6:21:b7:ee:86:76:75:78:
34:00:5b:5e:21:05:57:d7:01:b9:00:4e:56:0f:91:
80:1a:98:31:ec:55:47:03:a8:3e:ea:6b:fd:9c:91:
43:72:9a:89:33:e1:8a:f5:72:5f:50:bd:dd:63:da:
6c:ac:97:68:44:d4:75:f1:20:9b:be:31:08:0d:c2:
b1:94:4f:7c:36:ed:35:a0:63:60:ce:00:7c:da:33:
df:1e:05:7e:51:ad:15:8e:ec:11:07:02:9d:37:84:
5d:9c:1e:ad:35:f5:e2:59:5a:72:20:c1:79:8f:d2:
82:02:01:69:c5:8d:7b:0d:94:70:19:0c:ee:60:84:
93:3c:bd:4c:9c:76:b7:33:a4:9e:63:71:ae:bb:51:
61:88:6f:6b:08:b5:44:d2:2a:2e:02:82:a9:d0:88:
5b:66:46:0e:fc:13:24:67:03:48:38:b6:7c:d0:12:
3d:96:d5:e5:fa:43:c5:75:b0:d2:3a:96:2b:ee:cc:
67:17:cb:96:c0:6e:ab:f3:a1:6d:b2:46:04:70:4c:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:25:56:42:12:BF:D9:18:D5:8D:B6:D1:B3:CD:FD:2C:98:4A:AD:B7
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:14:e6:57:73:f7:b0:78:8d:9b:e4:05:ba:fe:20:3d:08:19:
05:d4:87:70:56:c1:3e:0e:3d:81:48:3b:d3:09:e5:39:8b:99:
18:68:51:0b:8f:b1:a4:2b:08:13:e6:54:97:b5:78:fc:f8:ee:
62:59:6f:76:78:37:93:15:a6:c1:9d:e6:d5:8c:73:06:cb:3a:
50:59:56:e8:69:96:fb:ca:6d:ed:dc:78:97:f1:7f:83:f1:e1:
64:dd:30:c0:93:9a:33:c6:94:0c:f2:fb:43:a4:64:c3:20:fc:
82:30:ad:87:5f:7f:d8:d9:97:f5:b5:39:a7:8d:84:83:04:ad:
52:b1:83:d4:71:66:e6:c6:fb:06:4c:46:fb:fe:cb:0c:65:01:
c1:5a:bb:57:e5:4d:c0:bf:d2:b6:a0:43:be:18:fc:0a:d1:44:
b1:6f:a6:2b:1c:4a:68:51:42:a3:a1:eb:5b:09:87:18:64:6d:
40:09:e0:cd:73:3e:6e:e8:3f:18:a6:e1:3a:a0:01:b9:39:fb:
7e:09:bd:bb:7d:50:cc:7b:56:ca:41:54:cc:ea:8f:0b:a5:a7:
ee:13:f6:f7:37:e5:0c:8a:1f:c6:97:83:d7:cb:81:b0:dd:53:
b8:62:c4:94:8b:cb:d9:92:7c:b6:a4:67:d0:2c:dc:a7:e8:af:
26:fc:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:24 2025 by rpki-client