Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: 5eJXSYHo/FCkc0b9vGM/g8OFW5cStSJz7Pl3MrwXAWI=
Subject key identifier: 9B:C7:FC:4A:1E:B4:50:E8:66:83:3F:A4:FD:A8:9D:96:3C:95:FD:4F
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 0198D6612C3251F34659FB5D85DCE84340B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0D1F
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: pqnwG4IjtsQKiG59vR0f5ak7wjnux5pyCb2PkOP3/pg=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2c:32:51:f3:46:59:fb:5d:85:dc:e8:43:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=9bc7fc4a1eb450e866833fa4fda89d963c95fd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:d8:7e:61:b4:19:f4:41:17:f7:5c:a7:c4:
e5:62:88:cc:35:f4:03:e0:ec:d9:f1:af:21:37:af:
db:54:5a:e4:89:72:b6:40:2f:9a:ce:6b:9a:c3:67:
5b:d6:10:26:8f:79:d7:76:9a:e5:6f:6a:cf:cf:87:
25:9a:9e:83:7d:42:22:98:e7:81:48:ed:3b:52:65:
cf:d1:e9:2f:72:e6:39:83:df:1e:db:f9:3b:6a:20:
7a:ec:d8:d8:f6:84:45:d6:d0:da:bd:88:25:8b:31:
9e:66:21:6f:03:a1:da:5c:37:36:b8:d0:88:55:f8:
61:d4:15:4b:a9:60:ae:c3:52:45:a5:07:e8:29:26:
3b:8f:01:db:7e:8c:b0:26:ec:87:7e:b5:36:bf:2e:
ac:2a:35:21:64:25:30:14:cd:e0:be:af:05:80:86:
1c:c3:50:6b:6b:a7:7d:f7:64:87:85:b2:95:48:0e:
1a:16:d5:2b:71:df:75:d0:33:f0:90:b1:62:52:36:
18:e0:7e:8b:2d:e6:dd:62:09:f0:36:01:1c:bb:ee:
23:93:01:25:cd:0f:87:12:13:11:78:54:9e:0b:f6:
12:82:af:ca:3a:86:7f:11:60:9c:20:4a:8d:20:2d:
c9:89:2c:b7:f6:7d:cf:4b:ee:75:4d:b2:47:ef:9d:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C7:FC:4A:1E:B4:50:E8:66:83:3F:A4:FD:A8:9D:96:3C:95:FD:4F
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d3:21:0e:39:31:6c:40:ef:02:a9:34:69:3b:d7:99:fe:6c:
58:03:29:b7:e2:81:9c:35:50:e7:88:ed:a8:9f:13:84:16:77:
4c:14:71:28:60:e3:22:83:89:f9:fc:85:3a:cd:6c:da:47:94:
df:dc:ee:e1:29:29:9c:a2:a2:07:55:fb:b6:33:3d:0e:17:b9:
26:4b:3e:20:e3:76:44:a7:9e:ff:b8:8b:2b:a7:d9:fc:d3:69:
c6:8b:9e:6c:3b:3e:7c:24:3f:0a:4e:12:11:44:c2:b8:4f:2a:
18:84:34:8d:bf:a1:14:bf:ca:10:d9:8a:61:83:62:8b:49:38:
85:b1:50:83:0a:11:d8:bf:01:59:bf:f6:34:25:bd:42:a4:bd:
90:b3:1e:86:d2:d4:8a:cc:6d:ea:f6:e5:8f:fc:aa:6d:5d:04:
20:6a:8e:71:04:5c:9f:de:8c:69:6e:28:1c:2d:69:f4:dc:8d:
12:68:2e:dd:18:1a:35:93:93:4c:ec:e1:98:49:fd:28:f9:70:
69:41:2e:42:cb:25:b7:13:0c:16:dd:01:2c:0e:9b:9d:1d:53:
cf:76:45:b8:70:b6:8d:fb:ec:f5:aa:ff:85:01:0e:16:f9:4a:
fa:65:63:55:c1:0c:34:d5:61:b1:bb:eb:73:14:1f:84:33:d9:
bd:d1:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:17 2025 by rpki-client