Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: FuWZKOnu8hGD8FF/YSyQ3ycjMx651FbPh0jkdB5IROs=
Subject key identifier: 1A:22:60:70:AC:B8:70:71:98:77:27:88:D2:BD:2E:20:41:B1:95:28
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 0197B74537BD8BD661D4CBDEBB5532B51282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: NE0QpIrJNG5d4jHksh4tUcrGIzEcLag4R61Cv2jM/XE=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:37:bd:8b:d6:61:d4:cb:de:bb:55:32:b5:12:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=1a226070acb8707198772788d2bd2e2041b19528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:7d:37:9f:28:05:e0:e4:be:02:bb:7f:eb:
44:ae:12:cc:9b:7e:a6:b1:bb:df:89:4a:5d:45:47:
73:c8:d3:79:92:45:e5:bb:4a:08:37:cb:f1:a2:7e:
13:a5:d4:ea:e2:0c:07:10:21:53:3a:1a:b4:c6:ac:
36:6b:21:b1:f1:44:b2:21:41:66:57:bf:75:be:e8:
1b:21:87:f9:b5:a3:44:d4:e5:e0:76:bb:55:40:de:
c2:87:e0:29:df:62:17:12:df:48:4d:7b:d7:1f:96:
15:af:b8:ec:00:d0:c6:06:64:da:99:b1:af:6c:20:
1a:dc:d9:06:2d:16:5e:a4:33:80:95:21:39:a1:ae:
cb:e8:b0:ca:93:d1:3c:50:1d:6a:cf:f2:e8:0d:ad:
79:b7:be:a2:fe:37:35:26:e3:b1:12:f3:1f:e9:7e:
96:c0:50:5f:23:76:cc:7d:40:43:6d:eb:32:0e:94:
98:05:ca:40:99:e0:ea:d9:25:ab:82:6d:a8:59:ec:
57:ad:11:be:a2:53:8e:38:e5:1e:7d:76:e6:1d:94:
17:71:bf:d9:60:65:6a:06:d5:7a:b1:09:82:71:80:
1d:55:78:ad:12:f3:6a:85:6e:8d:84:e2:06:dd:67:
bd:68:45:ee:cc:5b:63:b5:ea:d2:a3:0d:93:89:79:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:60:70:AC:B8:70:71:98:77:27:88:D2:BD:2E:20:41:B1:95:28
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cf:a7:25:a6:1f:71:04:15:6b:3d:18:c5:bb:96:4b:ba:60:
09:21:2a:88:58:3b:d4:49:18:b6:9a:20:e1:f7:67:dc:5b:ab:
11:e0:40:92:56:22:02:2e:f8:1a:4c:b0:68:9f:c9:31:97:a7:
11:2e:e8:72:64:56:d9:65:a5:4f:04:14:78:f4:38:8d:66:d4:
94:26:7c:1d:f5:c2:01:5e:67:31:71:86:fa:e5:69:68:43:00:
b4:37:cc:d1:03:e8:73:8b:7f:9c:94:6f:44:ee:24:aa:32:5b:
b1:da:b5:ea:e4:d0:60:e3:d0:4a:82:5a:41:1a:70:ff:b2:47:
bc:4d:6e:9d:80:e8:1e:c5:f7:48:b2:4c:50:05:a2:7c:3b:f5:
87:da:a3:e3:20:59:73:ed:51:17:14:91:2f:0b:07:23:a6:cb:
0b:75:0b:c3:de:42:dd:74:f9:03:ca:f9:fd:0c:19:09:94:55:
a4:20:5b:e9:12:62:3e:bd:87:72:a8:fd:2f:01:d7:8c:f7:4b:
52:00:61:4a:ca:37:79:f3:14:1a:8b:91:92:1e:e8:2b:c8:9b:
03:6c:9a:ac:33:60:40:10:34:09:d1:d5:26:a7:b5:4a:cf:03:
e6:b5:1e:89:24:c0:ab:4f:fd:f1:8b:67:58:8e:6b:6d:b8:3f:
12:bf:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client