Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: q9Dt8z8b/VGnlxNBKMxsjL93OjZ5LhihU46DuL1Md9M=
Subject key identifier: 37:7E:36:3B:98:18:E0:FF:97:BC:15:B6:85:F2:40:45:B9:BE:0D:B9
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 0198D8BD11DFD63F14FF311993F8670094F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 096D
Signing time: Sat 23 Aug 2025 21:02:06 +0000
Manifest this update: Sat 23 Aug 2025 21:02:06 +0000
Manifest next update: Sun 24 Aug 2025 21:02:06 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: qUevbD01zzp3lOkaxW4KrETKgPNTUR8C/T7tIAmDThI=)
2: PMHzHrS6vvRZOElfdDEFLn4owdU.roa (hash: UQqloSoHMyhRkRNOpx686QqPQutsxYq/mxr1bVAeLpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:11:df:d6:3f:14:ff:31:19:93:f8:67:00:94:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Aug 23 21:02:06 2025 GMT
Not After : Aug 24 21:02:06 2025 GMT
Subject: CN=377e363b9818e0ff97bc15b685f24045b9be0db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:55:70:c3:cb:76:af:ce:23:9d:37:c1:de:
75:40:96:c6:77:4a:11:7d:a2:68:7c:33:3a:28:0e:
bb:24:30:b9:96:2d:5c:5f:a9:d3:df:59:31:99:9a:
75:c6:54:68:5d:eb:e5:58:8c:06:48:2d:bb:28:e3:
a0:fb:e5:ab:97:2c:be:38:02:d1:ec:7c:be:4a:8d:
a7:4d:37:92:58:3e:19:d0:a4:7b:1a:0e:1d:91:33:
ae:b2:ec:54:49:47:fa:db:a9:1b:1f:b4:31:7d:df:
be:34:12:f0:39:c0:6a:d9:fb:52:4a:a1:c6:38:8a:
3e:1a:d1:af:29:94:c2:a7:c4:0f:72:4c:eb:34:07:
92:b6:f0:31:73:15:c9:bf:b9:8d:0d:60:5e:29:eb:
5b:f6:64:d6:b8:59:d8:29:27:0a:c4:fb:e7:7a:bc:
0d:c7:85:3f:25:fd:33:33:04:a4:3f:52:04:83:64:
d7:76:43:fb:f6:23:1c:ef:ea:36:21:e7:46:a7:90:
ba:2f:cf:24:f1:8f:44:1f:6d:25:b5:56:e9:0f:e8:
87:1b:e0:89:5d:1c:dc:8f:82:ce:b7:dc:9e:5a:e5:
d0:87:65:33:29:a4:e8:93:c9:e6:62:6e:cb:f3:57:
e5:ee:7d:02:58:9f:4b:ee:57:65:7e:fe:9c:de:60:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:36:3B:98:18:E0:FF:97:BC:15:B6:85:F2:40:45:B9:BE:0D:B9
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a6:cd:63:bc:9b:1a:2c:55:8b:be:23:3b:92:ef:52:7d:a2:
0f:ec:a7:eb:2c:7f:bb:b3:4f:c5:88:9a:7c:30:3f:c0:49:be:
1a:5c:55:61:bf:b3:03:1e:06:9e:e6:91:86:a5:40:a2:08:d8:
9c:30:0a:6a:d5:75:b2:3d:a1:7a:ea:a6:6c:68:13:c3:04:98:
45:df:55:23:e1:bb:05:cd:2e:46:a0:1b:6a:8d:48:32:65:57:
f3:89:ad:b2:08:bd:1e:2d:42:d9:82:a1:e2:0f:4f:21:e8:67:
c5:0c:0f:38:42:c5:e7:29:ea:65:4f:65:b6:28:f6:cc:c7:98:
7a:0a:37:e5:e8:7f:f2:01:c6:8c:10:e8:b4:8c:61:d5:cf:b8:
1e:43:ec:c2:e1:60:ff:d6:c8:56:81:ac:4e:3e:c3:4b:06:9b:
c5:59:18:d8:c0:3e:00:29:d6:60:80:5f:cc:43:08:fa:14:29:
19:98:32:fc:62:de:53:eb:91:7b:cd:53:f8:26:c4:ba:4c:07:
6f:5b:0f:3f:bc:ca:0e:a6:5c:90:96:f0:f1:84:ac:4b:51:d6:
a3:cf:9b:f0:22:e3:e7:2a:4b:b1:6a:28:f1:b9:76:34:99:c8:
dd:a6:38:3c:2a:38:d2:11:48:7a:b5:59:1f:3f:27:e5:ff:76:
b0:6f:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:56 2025 by rpki-client