Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: A+ePFf1mWJyLRc1auBgficEz/IEPX3Cz9a/Q4r35ruI=
Subject key identifier: 5D:95:76:B6:E2:F3:F4:CF:D3:9F:F1:C2:C7:17:D7:1D:A4:0B:27:CA
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 0197B7B365B74AA976CD70589CA1B201C7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 04A1
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: tIRNUDZ4kF4N7tWOUwzJPJ4gSk36pyoWOg/a9bGOnjU=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:65:b7:4a:a9:76:cd:70:58:9c:a1:b2:01:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=5d9576b6e2f3f4cfd39ff1c2c717d71da40b27ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:6a:42:1d:0c:b2:63:59:42:f5:25:51:0a:
cf:3f:bc:06:21:1a:df:b1:f1:37:50:9b:f9:50:33:
69:b6:72:72:f0:40:c7:ca:6e:7a:c3:c4:96:4e:1a:
b2:b7:bf:f7:20:2e:a0:2e:52:98:59:28:45:ca:0f:
88:e2:48:49:c8:fb:89:a8:97:f0:c4:02:23:ff:62:
67:38:7f:a2:a8:a5:55:ac:83:a1:8c:8e:b4:2b:e5:
44:f9:d3:ad:95:b4:c7:4e:3f:5b:2e:a7:2e:98:15:
ae:11:11:53:b8:26:7b:b9:ad:ff:8d:f6:f6:26:9e:
ef:f6:58:3f:c6:9a:57:4e:f6:10:26:bf:20:28:a1:
b5:ae:93:da:5a:ff:6a:ed:e2:2e:f4:55:92:bf:8c:
ef:38:33:4e:da:fd:e1:ad:1a:d1:a0:de:91:84:23:
05:75:b2:98:6d:f3:aa:33:57:9e:49:16:6a:33:c0:
ae:69:b0:49:0b:64:6e:c1:63:dd:51:9d:f5:d0:ba:
8c:e9:02:bb:2f:24:8f:a5:a6:fa:91:6c:79:9b:ee:
43:d8:ea:76:89:6d:82:4d:a7:b8:d9:03:de:d2:6e:
fa:5b:a0:97:a2:99:6c:9a:0f:0b:17:52:8d:77:c2:
4b:9d:cc:65:9b:6d:37:c3:e6:6f:ea:c4:19:f4:12:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:76:B6:E2:F3:F4:CF:D3:9F:F1:C2:C7:17:D7:1D:A4:0B:27:CA
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8e:39:b5:f1:4c:62:2c:ba:eb:60:52:f3:1d:2e:b4:9f:b9:
bc:79:39:37:79:7e:82:35:bd:6b:57:9c:7b:a9:5d:55:a8:c0:
55:c9:90:5b:5c:16:d4:18:45:d5:29:dc:7f:2d:dd:2c:96:68:
92:4f:dd:80:e9:1c:71:b6:89:52:66:9c:c7:4a:8c:9f:46:94:
84:fc:a8:81:2e:20:16:7f:f0:e9:e5:41:01:c0:10:a4:96:cf:
c4:46:bf:b2:27:cf:73:a1:b4:20:e1:ae:4f:b7:e6:ee:d6:41:
4e:ed:de:10:9a:b5:f3:86:b3:e2:a2:0e:e9:bc:19:2d:de:3b:
20:06:fd:1b:75:87:de:66:22:b0:42:5c:6c:34:fb:ae:71:ad:
6b:be:88:df:32:0f:a5:57:59:47:a1:c3:5d:df:f1:30:d3:6f:
19:45:ae:b3:5e:bf:ac:b0:3b:a3:3f:d3:7c:46:ca:9a:4f:a1:
d0:b1:98:05:c8:1a:28:d0:b9:74:d8:42:43:59:03:e2:ba:a0:
0b:84:10:52:82:ac:bd:e0:e6:80:c3:5d:c2:88:a8:31:aa:d1:
ff:9c:4c:88:ac:a0:ff:b4:d8:8e:45:a9:1e:8c:b9:f9:6c:1f:
eb:d9:a6:46:7b:d0:0c:7e:7b:aa:f1:4b:c5:9b:db:49:a8:75:
c4:00:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:53 2025 by rpki-client