Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: wee2SFhuNxfnwMl9SiThnpOHxTuI7LY7ZT9OIWhuV8s=
Subject key identifier: B8:EB:CB:00:C1:4E:43:E9:AF:03:B8:3C:EB:B9:3F:8E:CD:A3:AD:72
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 0198D4E0A96D70C8F42B093EA6BD65787DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0F30
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: qOW+mms1t5O42Ou2Z4s1OOyAaccVmGCV/NUthH4CPRk=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a9:6d:70:c8:f4:2b:09:3e:a6:bd:65:78:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=b8ebcb00c14e43e9af03b83cebb93f8ecda3ad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:f7:39:37:8f:a1:cf:01:68:8a:19:1a:45:
1d:56:92:25:11:32:41:b3:6e:fb:d2:2d:7e:87:11:
11:f8:63:b5:38:27:46:8a:80:3c:0e:e1:52:2a:e9:
21:97:4b:d9:35:fe:53:99:aa:41:71:82:73:3e:3c:
ed:62:03:62:a4:82:7c:10:76:69:1c:c4:64:d4:10:
12:ef:a8:68:87:ca:64:f4:cf:f5:52:80:0f:35:a2:
27:dc:30:2a:b3:fc:25:eb:3b:22:f4:eb:d6:aa:a6:
74:62:32:a1:2c:74:e3:17:56:b6:f6:99:40:ee:e1:
d6:e0:27:25:6f:92:10:db:2e:31:a2:cc:75:00:59:
4b:8f:01:2b:21:04:ac:db:2b:af:73:5b:cf:02:68:
f6:cd:e1:39:0c:cd:df:50:7c:8e:4c:9b:5a:de:1e:
af:ba:58:cb:44:f3:c0:88:5f:af:34:11:b4:0c:be:
aa:08:5e:9d:87:35:93:15:4f:ef:66:d1:92:01:37:
57:15:a5:5a:be:3c:43:87:5c:c1:26:1b:71:b7:77:
2e:99:ad:8b:3d:d1:ff:9c:d6:2d:ba:30:6e:76:21:
cf:58:55:f6:29:89:52:61:62:ce:b0:d4:1d:d3:33:
ef:6f:04:49:63:c1:63:64:72:52:13:4a:76:56:b3:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:CB:00:C1:4E:43:E9:AF:03:B8:3C:EB:B9:3F:8E:CD:A3:AD:72
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:c9:21:a8:69:68:be:8f:df:7d:bc:0a:50:0c:0c:a6:5f:
b0:a8:55:08:b5:c5:00:02:30:da:2b:3e:e3:80:e9:86:1e:d6:
69:95:69:72:55:f5:ce:cc:1e:9c:db:9b:2d:35:55:31:2b:5b:
97:42:0f:1f:a9:85:1c:9c:37:ed:f9:48:6d:49:ec:a7:d4:e8:
d7:ba:d2:a3:ca:44:c4:5c:59:e1:cc:f8:e0:2a:06:75:ac:6e:
30:4c:13:62:20:9f:97:2c:ec:c5:f7:67:4d:c0:83:f2:dd:9d:
e6:2e:57:d8:27:a1:8a:57:a6:51:47:e9:11:93:f5:bc:0c:9b:
58:c9:b4:d8:05:f0:d9:16:7d:ca:ab:42:2b:d2:45:a9:2d:5c:
d5:d8:5d:6e:a1:a8:56:eb:37:d5:41:e3:8b:03:27:4d:a5:00:
ce:d6:a6:e8:11:73:bb:78:3d:a6:e9:a3:25:72:c2:00:4c:79:
bc:22:53:3d:0c:cb:1e:1c:b8:bf:43:41:33:b4:4b:75:ee:da:
2b:d5:41:22:6c:0b:74:38:32:b8:d6:11:81:e6:8a:15:b2:93:
5a:23:f2:55:87:59:a7:07:24:29:7c:eb:07:41:b4:11:c3:35:
76:23:27:36:11:c7:30:28:16:55:66:e0:57:bd:7c:d4:59:de:
a6:5e:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:43 2025 by rpki-client