Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: J8AQmjCQnGJevIuOrK48odAqgHdJT/UTSfzvPrgia40=
Subject key identifier: 00:A0:97:1B:29:BE:7B:C1:31:F0:DD:F3:60:55:54:66:65:7A:BB:7E
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 0198D472DE1CBE9483DFB72DED2151EA5FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 09B3
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: UzQOr8w8n0s1hMAp3bS6s6obOy4mal3GLBaLruHR6xc=)
2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:de:1c:be:94:83:df:b7:2d:ed:21:51:ea:5f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=00a0971b29be7bc131f0ddf360555466657abb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:1b:aa:38:b1:83:64:fb:2c:70:17:f5:58:
30:fb:8f:e1:93:b5:20:61:1a:e6:9f:02:ee:28:f2:
1d:8f:bd:2d:9d:3d:87:24:16:c8:cb:06:fe:cd:c4:
00:f3:9b:8d:8f:1f:f0:cc:87:88:4d:f7:f5:8d:07:
14:98:ee:0c:70:48:fb:26:81:15:55:e7:c7:17:20:
c4:49:18:61:c4:e6:0e:ac:bd:a9:46:18:4c:ab:4f:
25:3a:6b:37:13:bb:c6:ab:31:f0:7b:e3:3e:18:d5:
94:8c:f0:eb:ce:3c:b6:fb:ba:5a:58:d2:87:db:de:
00:e6:f5:78:60:9c:e2:e0:81:21:bd:ba:bb:40:ef:
fb:64:a4:ec:e5:6e:18:96:2d:bb:11:91:dc:3d:42:
7f:a7:4c:ec:c2:dd:1c:a5:37:3a:1c:67:e3:57:b0:
78:d2:61:7d:59:fa:56:2c:a5:ea:c8:5b:c5:f6:26:
dd:3b:8f:28:94:58:6c:4d:cb:6f:3e:55:aa:7e:a6:
58:10:74:6d:6b:4f:50:a9:aa:13:49:fb:db:48:ee:
7e:62:14:3c:8a:bf:1b:30:44:6d:d7:00:19:3a:c4:
3a:b6:8c:60:f0:18:40:1f:3b:37:58:93:82:ba:71:
18:0d:6f:96:07:a4:8f:e9:7b:01:84:e1:b4:17:9d:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:97:1B:29:BE:7B:C1:31:F0:DD:F3:60:55:54:66:65:7A:BB:7E
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ba:69:d4:b2:70:c2:d6:4f:ad:8e:71:13:c4:20:df:42:4f:
29:a8:45:3c:a9:df:3a:9f:90:88:cc:cf:a4:32:8c:d2:be:1f:
b2:29:f6:ab:cf:a6:16:4c:8d:38:f0:85:7d:7a:0e:13:6a:ea:
94:dd:66:b1:48:88:b9:ae:fa:50:3b:7e:27:27:58:81:fe:4a:
76:c0:8b:5e:f4:28:95:25:2d:b5:6f:06:63:8d:78:6f:09:b0:
2d:51:82:45:7d:a7:15:17:20:40:be:91:ab:db:c5:77:79:8e:
e4:62:a6:9e:de:96:ad:99:ba:23:f3:1e:ce:26:21:e9:3b:c7:
50:ea:89:ee:ab:f3:f5:65:22:f9:7b:01:da:7a:34:bf:bc:56:
5f:86:3c:ba:1e:12:f9:cb:46:3f:8a:6c:19:e8:22:2b:84:e4:
b4:8c:a9:3d:bc:28:6d:f3:07:45:fb:12:dc:b6:c1:6f:fd:10:
2c:2f:fd:e7:39:bd:a5:6e:39:09:c5:dd:41:b3:68:55:4f:c7:
81:46:06:18:01:69:66:b8:46:62:21:fc:cc:7f:20:ad:9d:c3:
47:01:3c:d6:56:cc:b8:2c:9e:ae:70:4c:55:28:1d:53:80:d2:
ad:46:81:85:ea:6f:03:54:f3:a7:9e:ba:97:e8:86:66:40:61:
44:f1:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:02 2025 by rpki-client