Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: 4RAxbnrvd1g2tAN0Q6TyFDTKTA5Zug9pF+Epdevq2cY=
Subject key identifier: 8F:AB:53:F1:5B:C5:F5:ED:BA:51:BE:BA:67:C2:05:26:B8:FB:E7:17
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 0197C0B64C6B1C9C902D4EA2767A578D1107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0EA1
Signing time: Mon 30 Jun 2025 12:01:01 +0000
Manifest this update: Mon 30 Jun 2025 12:01:01 +0000
Manifest next update: Tue 01 Jul 2025 12:01:01 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: lR/SCghjI/ae7Z9RsPMZEXVCEkgy8rDMHF603hYFe1g=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:4c:6b:1c:9c:90:2d:4e:a2:76:7a:57:8d:11:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jun 30 12:01:01 2025 GMT
Not After : Jul 1 12:01:01 2025 GMT
Subject: CN=8fab53f15bc5f5edba51beba67c20526b8fbe717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:76:fc:e9:6d:4a:21:84:85:ff:18:a8:9c:
fb:b2:e2:57:c2:81:0a:29:36:03:49:c0:ea:a0:71:
03:22:3a:06:44:a3:bf:e8:c7:13:a8:a5:14:3d:0b:
14:c3:f2:87:44:31:25:af:79:c5:18:c2:87:dd:7b:
66:34:4e:09:ec:bf:55:e0:b9:70:29:51:1d:b0:b4:
83:ef:c1:79:01:0f:01:5b:ca:f0:13:10:c8:38:ac:
c8:3b:a3:e9:77:c4:b8:c2:9a:c6:5a:43:d2:64:72:
82:d8:1c:57:11:d8:23:10:a7:34:ec:74:3c:2f:ac:
15:6d:38:8b:b6:19:c0:2a:77:0a:be:e1:9d:4b:79:
70:37:9e:60:8f:f7:19:c3:36:da:42:31:4e:9c:7f:
cc:68:c0:42:ce:fa:59:08:4b:7d:62:28:61:60:33:
15:ba:0a:21:30:77:c7:7b:9a:aa:c7:e5:c5:65:10:
a7:10:fa:1a:9d:f2:19:d7:8a:b8:42:93:a3:53:f9:
69:1e:89:2d:56:47:46:d0:e4:32:2b:bf:8c:e0:9a:
44:7b:b1:d5:c4:44:29:a3:ad:01:31:65:5a:cd:cd:
67:df:e3:db:70:78:05:16:de:f3:15:d6:b0:89:11:
43:c1:b5:57:92:f7:1b:77:92:01:3d:e1:1b:d6:9b:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:53:F1:5B:C5:F5:ED:BA:51:BE:BA:67:C2:05:26:B8:FB:E7:17
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:aa:ff:63:36:cc:7f:7a:74:52:f1:cc:23:fb:5f:03:de:ea:
54:d2:d2:ff:fd:ea:51:f2:9a:fe:3f:2c:7d:f7:29:93:c3:54:
38:76:19:4f:8b:6a:8f:6b:ec:31:57:9f:ce:d3:89:3e:50:50:
f5:0e:23:08:14:a2:06:8a:6b:3c:8e:22:a2:14:5b:88:5c:65:
9a:e2:71:08:82:22:d9:7f:37:e1:2d:f3:dc:d1:f2:88:1c:f2:
ea:04:4b:d2:49:5e:40:08:31:aa:e9:9a:97:e5:ba:e0:1e:38:
a7:20:67:c1:b0:48:18:80:5e:f7:1c:97:b7:99:5f:58:0e:6e:
2e:19:16:98:9c:94:49:a7:de:86:29:3c:59:3b:ac:5c:32:32:
02:19:17:e5:11:6b:f8:c4:67:ac:43:64:69:a8:d1:f8:3e:47:
c5:09:65:0e:6f:c3:d2:2c:a0:da:2a:78:93:4f:7b:67:db:02:
c1:28:9e:8d:47:a7:7c:28:82:e0:fc:16:7a:b4:31:5b:20:c0:
97:24:ab:52:2f:1e:d0:29:c8:dc:7e:9f:9b:58:fc:3d:16:83:
cb:4c:00:8f:8c:08:3f:93:f0:e3:64:4e:6d:0f:48:ae:08:88:
97:ba:63:5e:f9:32:ba:a4:3d:55:87:71:71:55:3a:dc:e9:81:
b9:a0:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:48:41 2025 by rpki-client