Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: 6H6wT8F8dpagp4p4KIcA0oMNblk2ShihrgkCIfrRnjg=
Subject key identifier: A6:A2:5A:76:AD:A6:18:84:15:48:25:01:E3:97:D8:3B:52:29:0E:B4
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 0196C7CD07FE5F6DE45EAB048F0D5BC1C69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0AAE
Signing time: Tue 13 May 2025 04:00:24 +0000
Manifest this update: Tue 13 May 2025 04:00:24 +0000
Manifest next update: Wed 14 May 2025 04:00:24 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: tyTuU85D7Yd3IYLy/z8mdtmJGA2J0rCfaz4hrQBc7PU=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:07:fe:5f:6d:e4:5e:ab:04:8f:0d:5b:c1:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: May 13 04:00:24 2025 GMT
Not After : May 14 04:00:24 2025 GMT
Subject: CN=a6a25a76ada6188415482501e397d83b52290eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:b5:eb:7e:eb:44:79:40:9d:f7:36:07:e8:
6f:78:c6:4b:50:ff:06:72:2e:df:d4:33:43:91:6c:
79:92:f1:17:32:49:82:cb:0b:16:89:22:20:0a:d5:
d0:e5:b2:8e:dd:c9:ce:e0:fb:fd:ca:c9:b7:c0:8e:
9d:89:47:5d:78:27:28:c5:b9:7f:d0:f0:4c:dc:2a:
62:f9:f6:ee:81:39:7e:56:4e:4e:5e:95:1c:7c:03:
eb:c4:22:9c:76:84:3f:ed:1b:c4:6b:d4:28:5b:1b:
a3:c0:ba:5c:2e:f9:44:62:85:cb:1f:34:db:48:c6:
e0:c8:31:8e:ac:9d:cc:49:54:52:c5:3c:75:90:72:
60:bb:f1:3c:1f:d9:87:ae:ba:c1:a1:bc:19:d1:93:
d4:39:02:18:93:89:4f:24:44:8e:e1:c6:21:63:c8:
f2:fd:b5:06:53:26:f4:78:d5:9c:cf:c2:32:9a:e2:
08:27:c0:c1:b2:b9:f9:06:62:f3:0b:7e:ac:47:ca:
ca:46:25:21:6b:06:04:ea:92:21:18:cd:e7:6d:a3:
a9:56:8f:86:5d:e1:86:bb:46:94:f6:1f:f9:c0:d5:
d3:85:21:ee:78:93:35:cc:38:d5:5b:bb:db:69:f6:
ea:cc:f8:05:da:e8:b4:e4:6c:4d:18:84:b7:83:83:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:5A:76:AD:A6:18:84:15:48:25:01:E3:97:D8:3B:52:29:0E:B4
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:83:cc:67:f7:6c:0e:68:b8:d2:50:8b:b6:43:5a:6f:fc:bb:
44:26:a2:46:8c:de:d2:4d:62:7a:21:86:f1:2a:c1:a7:ad:86:
cd:46:6c:f1:07:b6:48:6e:70:99:0b:12:0e:4a:57:92:ed:ee:
4d:fa:79:14:f4:8d:78:ee:76:b2:8f:3e:a1:b3:21:14:b3:1a:
65:45:e8:80:0e:9e:f7:18:fa:42:87:55:5a:b9:3a:f2:41:ce:
73:3e:35:b4:f7:c4:08:37:31:d8:f4:9f:80:18:b4:9c:3f:5b:
57:91:19:74:ae:ac:6d:aa:f9:07:e6:f2:19:10:ca:65:ea:c9:
54:d7:a9:e6:34:25:77:c7:8f:ff:32:b2:87:ea:ea:bf:9f:65:
4b:b2:27:10:ac:09:74:09:45:dd:5f:e5:51:07:3f:13:c2:5d:
5b:59:45:16:f9:c4:c2:10:1b:53:3d:e9:20:49:01:fc:cc:04:
67:36:3e:6e:02:ae:31:21:e6:d4:e6:c3:f0:52:30:46:cb:44:
7e:87:55:50:f4:24:a9:58:f7:39:20:a3:e5:97:35:e4:16:90:
90:9e:3d:87:ef:13:cf:f3:e2:de:f4:2b:29:86:55:dc:35:89:
a1:3a:54:7e:0c:c6:c6:48:bd:62:8e:98:e9:b9:a0:ed:eb:22:
35:32:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:43:46 2025 by rpki-client