Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: heYBv+ojbPfMmvlHeyzzObWlIZLB2zT+BMz2nFZwDGo=
Subject key identifier: A6:2D:5F:21:22:FE:5B:2B:59:F6:68:90:5A:40:B5:51:44:6E:3B:49
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 0197B88FE51428C39A14DA88EA0A67343B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0C8B
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: /qahoEthj1f2J2Ui2m+ndaHKke4mDfpKLxUkpI+9F+M=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e5:14:28:c3:9a:14:da:88:ea:0a:67:34:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=a62d5f2122fe5b2b59f668905a40b551446e3b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:04:6d:13:da:cb:74:51:77:d3:83:fa:19:
ef:62:c4:bd:a4:81:77:e1:f6:38:be:57:2c:5e:8d:
83:a4:c9:ed:4a:ff:bd:0e:53:5b:77:25:f4:b9:2b:
6a:76:a6:eb:38:d0:88:48:7a:d7:c1:0c:78:aa:25:
33:b9:96:34:07:4f:9f:28:76:2d:df:80:3b:cc:f8:
d0:80:7a:f9:6c:e2:1a:d4:e8:e9:a5:f2:6a:52:3f:
89:14:aa:82:2b:8b:b4:8f:6c:9a:bf:59:4e:ba:8c:
49:14:83:c8:a0:df:3b:2f:7c:cd:bb:70:cf:00:db:
10:87:0d:09:21:f1:d2:fc:5a:e6:46:79:6e:10:c3:
b5:6b:19:73:c6:f4:c2:58:7f:64:b9:40:88:6d:8b:
94:40:90:6a:75:52:cc:5d:1b:48:ea:f0:f2:56:3f:
70:c8:d9:67:b1:4b:0d:f8:f0:5c:ae:cb:47:22:f0:
2f:57:4e:31:46:8a:7b:e0:f0:b6:bf:fd:74:0a:64:
10:75:ac:f1:3e:ee:bd:fc:59:68:29:30:ed:7c:73:
7d:09:70:bd:25:bb:64:d7:1b:e5:08:21:c6:4f:99:
ca:28:e1:c9:85:87:f1:89:28:fa:f2:36:0f:2b:0f:
a4:c8:ad:90:7f:2e:cc:ac:64:9c:94:1c:e0:5d:9b:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:5F:21:22:FE:5B:2B:59:F6:68:90:5A:40:B5:51:44:6E:3B:49
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:38:34:20:be:3c:cc:4e:20:58:97:2b:98:42:e5:b4:ad:
b3:52:3f:8a:96:10:50:c8:fa:cc:d6:05:b4:5b:36:67:ec:1b:
ad:d9:b1:c1:9c:d4:a5:cb:48:1b:a6:91:9f:e9:18:d6:d3:ac:
bc:52:85:58:f3:bf:49:8d:9f:37:9c:f0:61:56:ee:52:33:bc:
d1:bf:4c:65:7e:69:8d:7b:87:c6:51:4c:fd:71:0f:00:ac:f0:
29:39:db:83:4c:27:77:45:90:ec:12:49:b2:28:08:e6:1d:1a:
82:fc:1a:54:b0:89:d7:d0:c2:11:1d:c4:db:30:d4:d1:ab:f9:
cd:ed:8f:de:2c:2a:22:4c:32:83:8e:78:f6:d7:0b:3c:07:a3:
e3:d0:a0:8a:45:c6:5b:9a:3b:fe:24:a0:9b:ba:26:33:30:7e:
30:ab:5c:fc:94:8e:15:f2:cf:65:14:ac:eb:0e:c9:ee:c0:cd:
46:4c:06:6b:fe:6a:5e:be:9e:8d:1a:6b:79:05:a8:73:b5:1b:
87:29:f8:fe:c6:27:51:96:a2:27:4a:a1:f0:85:a7:0e:9e:25:
3b:a9:29:e9:67:23:50:1c:57:08:2b:36:dc:7a:04:01:2f:4f:
fa:e6:d4:ca:4c:5b:3f:f0:d3:cd:40:71:80:4b:73:47:2f:4c:
6b:73:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:36 2025 by rpki-client