Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: LQzVVqfFnEwqOFQYqRvDzrrZKixQ1SmAB4wTbi1hPLI=
Subject key identifier: EE:83:E7:8F:89:F4:C6:C7:60:AB:B5:A4:56:0A:61:7E:C3:BE:0B:2C
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 0197B6A22DC2161D0D138E950D8F1C127D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: PQO3gAdxm9GE5uD9taL9hHeww8EzhEJbcVDsmq3q1xQ=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2d:c2:16:1d:0d:13:8e:95:0d:8f:1c:12:7d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=ee83e78f89f4c6c760abb5a4560a617ec3be0b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:3d:ff:1c:ec:09:72:9a:93:69:eb:53:d4:
af:67:29:52:7d:13:2f:93:47:ac:3f:ca:a7:5b:17:
ff:09:cd:40:3b:41:f5:21:6a:fb:a3:67:52:d4:7f:
9b:19:cf:d0:6a:db:42:55:38:79:03:8b:74:84:ac:
0d:26:6b:f6:41:e8:3b:16:87:f3:36:87:a6:96:ca:
a3:b0:0c:a6:21:4b:46:97:89:f2:54:22:b4:cd:23:
64:49:c9:c3:b4:2b:c7:06:cb:1f:b6:32:00:38:16:
58:75:6b:55:48:bb:da:75:23:ac:9f:61:a0:79:7e:
08:2c:61:7b:b4:ac:49:91:4c:f5:8e:f8:bb:86:91:
cc:5f:f2:26:01:3b:e8:f4:6a:97:5c:2c:a6:54:b2:
47:90:5d:57:d4:5d:82:52:56:0d:6b:10:f2:db:d8:
f0:e8:76:fe:cc:da:79:79:e9:19:e8:c4:21:40:d7:
95:39:30:12:e1:ee:f7:7f:31:d8:61:96:7e:7c:b9:
a0:48:7b:56:1a:fe:8c:15:04:82:3d:37:ab:b4:09:
fe:a5:8e:ec:1e:05:42:40:47:93:d1:a7:61:63:b8:
54:2d:fc:10:aa:72:85:7d:4e:10:2f:b7:26:a8:d1:
b9:b3:74:1d:02:a7:10:f9:18:ac:a0:35:17:07:c7:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:E7:8F:89:F4:C6:C7:60:AB:B5:A4:56:0A:61:7E:C3:BE:0B:2C
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:f2:44:e4:f5:2a:7b:2c:0a:a3:42:0c:08:bd:df:5c:1f:
b4:5d:14:63:f8:64:19:e9:b4:1e:38:be:94:51:50:03:ec:2c:
46:79:fc:a8:ff:01:3c:06:01:8f:a5:6d:55:06:81:02:ba:e5:
f7:f5:ac:96:b1:e2:11:9f:09:2e:61:22:19:e4:06:78:fa:c6:
9d:ec:2b:05:ef:4f:d6:40:61:ea:ac:a1:8b:d0:9c:31:8e:b0:
3c:bb:60:bf:bc:b5:e9:56:d0:c6:d3:b3:68:86:b5:00:09:b9:
4b:00:f8:20:25:bf:9d:98:a5:5a:b6:78:fb:a8:b4:8c:f2:47:
57:06:b8:01:cf:ae:db:b7:e8:a6:b2:4b:98:21:65:24:86:3b:
e8:71:bc:91:bc:2f:5e:9c:44:f1:f6:91:6d:d5:0d:e1:2a:df:
9f:63:a4:d9:8f:e2:7f:8a:a9:34:93:4a:2d:a8:6e:8e:50:a3:
bc:7e:59:b7:30:4e:8d:69:5f:f6:7c:2b:50:0a:1e:65:ac:ed:
61:9f:eb:fd:00:1f:5b:cc:ea:b8:42:48:e7:73:c2:0d:a7:c2:
b4:c1:1f:a7:da:00:53:ea:09:c5:9d:1c:25:31:5b:ec:ac:41:
fc:fb:84:60:ae:0f:10:97:55:77:69:d0:82:23:70:d4:80:27:
dc:0d:eb:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oi3CFh0NE46VDY8cEn1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz
NTcyOTMwHhcNMjUwNjI4MTMwMjUxWhcNMjUwNjI5MTMwMjUxWjAzMTEwLwYDVQQD
EyhlZTgzZTc4Zjg5ZjRjNmM3NjBhYmI1YTQ1NjBhNjE3ZWMzYmUwYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp89/xzsCXKak2nrU9SvZylSfRMv
k0esP8qnWxf/Cc1AO0H1IWr7o2dS1H+bGc/QattCVTh5A4t0hKwNJmv2Qeg7Fofz
NoemlsqjsAymIUtGl4nyVCK0zSNkScnDtCvHBssftjIAOBZYdWtVSLvadSOsn2Gg
eX4ILGF7tKxJkUz1jvi7hpHMX/ImATvo9GqXXCymVLJHkF1X1F2CUlYNaxDy29jw
6Hb+zNp5eekZ6MQhQNeVOTAS4e73fzHYYZZ+fLmgSHtWGv6MFQSCPTertAn+pY7s
HgVCQEeT0adhY7hULfwQqnKFfU4QL7cmqNG5s3QdAqcQ+RisoDUXB8fGHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6D54+J9MbHYKu1pFYKYX7DvgssMB8GA1UdIwQY
MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt
MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2
LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbzyROT1
KnssCqNCDAi931wftF0UY/hkGem0Hji+lFFQA+wsRnn8qP8BPAYBj6VtVQaBArrl
9/WslrHiEZ8JLmEiGeQGePrGnewrBe9P1kBh6qyhi9CcMY6wPLtgv7y16VbQxtOz
aIa1AAm5SwD4ICW/nZilWrZ4+6i0jPJHVwa4Ac+u27foprJLmCFlJIY76HG8kbwv
XpxE8faRbdUN4Srfn2Ok2Y/if4qpNJNKLahujlCjvH5ZtzBOjWlf9nwrUAoeZazt
YZ/r/QAfW8zquEJI53PCDafCtMEfp9oAU+oJxZ0cJTFb7KxB/PuEYK4PEJdVd2nQ
giNw1IAn3A3rlw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:08 2025 by rpki-client