Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: Yo8ei/H0kkOPtQnwJbv5K6AXrFUnxyAcF574sz8chXM=
Subject key identifier: 85:6E:F3:79:1C:58:F8:85:37:AD:11:24:C6:C1:06:F0:11:B0:EA:4D
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 0197B6A235D6D9ED161034AC02AB893B8090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0BA2
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: +Rjkt7FVsBUMX9G0SLfKkL1XL58WqzUuwTYwQrc1wKU=)
2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:35:d6:d9:ed:16:10:34:ac:02:ab:89:3b:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=856ef3791c58f88537ad1124c6c106f011b0ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:d8:9b:c7:ba:a4:c7:7b:6f:60:6d:33:7e:
cd:92:ed:76:40:da:b9:bf:7b:2b:36:10:45:f7:33:
e9:4a:f4:1b:8e:69:b4:95:fc:a5:c7:c8:bf:df:6c:
0c:8d:90:6c:76:29:0c:8b:3f:66:05:c2:31:32:10:
26:a6:7a:80:fd:59:70:4b:99:45:18:fe:d7:39:19:
be:05:8a:4b:f9:f2:f2:26:75:af:0f:f2:ec:71:b2:
03:74:3f:5d:7b:b6:9b:3b:e9:06:26:9d:03:74:d5:
31:94:66:21:85:8b:1a:e3:8a:0e:59:65:83:27:95:
ee:f1:09:97:b5:71:36:8f:73:80:f5:60:bb:3b:9b:
d3:8d:22:b5:40:d4:86:99:a6:a1:8a:c2:dc:68:7f:
f9:d5:17:e7:5e:fa:75:41:cc:b8:2c:c5:9e:b4:7f:
bd:6c:c6:cd:5b:d6:fc:af:52:e9:db:22:d4:33:f0:
fe:e7:3c:54:8c:88:83:5b:d5:a0:39:71:ac:2e:c4:
66:a2:69:89:3b:f4:6e:03:03:6d:a9:d1:80:56:43:
ed:92:26:c6:4d:9a:a6:c9:b1:e9:e3:23:7d:ee:38:
d2:ed:ad:e6:75:5d:ff:56:60:4c:e2:57:a7:49:4c:
79:91:9e:e5:17:6c:61:92:b4:b0:e6:bc:79:bc:57:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:F3:79:1C:58:F8:85:37:AD:11:24:C6:C1:06:F0:11:B0:EA:4D
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:30:4a:19:9f:c8:76:f4:1a:9a:01:79:5b:fa:93:6d:99:
68:cd:89:7c:43:ee:1d:a7:41:71:d7:9f:9a:bf:84:48:86:45:
6c:70:e1:a9:da:1e:05:54:ea:0e:63:d7:76:ea:1d:00:30:4f:
91:a2:17:91:2b:3d:53:af:6e:31:f0:24:60:21:b3:ed:ea:7e:
61:1d:ef:d1:ff:07:79:de:07:99:99:64:87:a9:2f:d9:ee:e0:
69:6c:6e:4d:d8:d6:1f:cf:2f:ad:9b:26:e8:a2:e9:0a:29:7f:
97:99:61:26:c1:70:06:b5:73:a5:0e:c4:2f:b0:cd:3a:b6:b0:
d7:7e:40:14:a7:95:24:3f:3c:3b:5f:a8:e8:1d:6f:af:34:2f:
b5:23:4e:51:72:57:e1:e9:00:75:e4:cb:29:f1:fc:e5:d5:13:
3b:08:13:c6:e0:20:09:57:2d:c7:e3:39:36:8c:3b:40:94:4e:
e4:96:5a:a3:c8:e9:32:15:b8:ff:15:97:20:1d:39:d1:56:b5:
04:b6:0d:51:78:aa:7f:ec:03:70:84:14:9b:29:65:a3:e2:2a:
a9:85:d6:97:04:3d:91:5a:7f:28:4d:0d:c3:df:f9:00:dc:0a:
6e:06:af:6a:89:83:75:f1:36:31:36:cb:bf:e3:f3:ac:0f:dd:
a2:cb:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:49 2025 by rpki-client