Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: YVf5s86ub0k7xTjlE56ZwzXLmnUR8IKB2ZbyKzFBH2Y=
Subject key identifier: 95:2D:A6:53:03:5C:AD:5B:C3:46:34:58:90:F3:6E:86:8D:BA:D3:1D
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 01976D3DE19FF68D280067FDDD0DF498F6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 14E7
Signing time: Sat 14 Jun 2025 07:01:01 +0000
Manifest this update: Sat 14 Jun 2025 07:01:01 +0000
Manifest next update: Sun 15 Jun 2025 07:01:01 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: jC3R63URoVNFUCBRH5GXsYgFLAx0UxfOzU6Fj0Kh5Tw=)
2: I8hH4YeV3HM0yWrc52lfIOhYTt8.roa (hash: colmP8j9TQydvYGFc1+glmJgVJjDM5AxsV+6TerMW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e1:9f:f6:8d:28:00:67:fd:dd:0d:f4:98:f6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Jun 14 07:01:01 2025 GMT
Not After : Jun 15 07:01:01 2025 GMT
Subject: CN=952da653035cad5bc346345890f36e868dbad31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:73:1e:7b:00:3d:86:a9:37:91:9d:9c:70:
22:18:b8:e4:6d:51:c5:2c:ec:82:c7:f9:19:06:f5:
62:af:d6:7a:95:12:08:38:37:c1:ac:b9:db:89:c0:
af:ed:18:98:25:ef:bf:f5:38:b0:83:f9:d5:64:c3:
c1:59:d0:0b:82:98:43:28:44:ed:8b:f0:4c:9d:9d:
04:9d:05:a8:99:53:64:9b:1e:0d:52:ea:90:17:31:
c7:fe:f9:1e:55:96:72:87:77:94:ec:dc:c3:6a:33:
0b:7d:ea:70:88:73:88:9d:5d:95:46:65:6f:58:39:
44:45:82:27:1f:10:93:6a:73:a9:d6:b6:e2:1e:a0:
1e:cb:dd:5e:0d:04:11:23:99:89:96:20:d3:2c:54:
f6:01:e6:f4:5e:f8:08:f8:3f:6e:0c:f1:89:a9:a5:
2d:c3:c7:e8:33:4f:b3:7c:e7:9f:ec:4b:4f:ec:81:
32:d0:e3:20:c2:5f:03:0b:8c:8c:55:92:da:6f:61:
a5:85:a7:52:cc:66:42:dc:15:fa:79:27:82:39:a4:
2f:02:00:c2:3b:4b:e4:64:7c:bf:9f:33:9b:48:9b:
c1:92:ff:24:ef:38:0b:19:d8:10:1b:35:d2:20:34:
b3:3f:99:fb:8f:f3:4c:70:3f:6f:22:92:51:86:c9:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:A6:53:03:5C:AD:5B:C3:46:34:58:90:F3:6E:86:8D:BA:D3:1D
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:02:50:37:50:13:23:04:5c:4d:d9:e0:25:9a:5f:60:0a:
91:77:f0:87:de:ec:9a:1c:99:6b:56:4b:cd:37:f8:fd:95:3c:
90:80:a8:01:56:a0:82:ba:9d:1c:57:32:98:29:12:e4:ab:d6:
c6:43:76:ea:65:c0:b0:cc:08:a9:a5:d6:31:cc:8b:c7:33:60:
a3:5f:86:9c:4f:08:92:b1:31:49:91:fd:e1:38:63:23:45:a8:
18:80:60:2b:2c:dd:69:db:0d:71:5e:70:93:19:ee:8d:f2:3d:
8c:bc:5c:28:4d:09:4e:f1:90:a7:dd:2b:8f:47:f7:bb:82:82:
ed:e4:46:15:b3:8e:4a:ae:4e:f3:60:32:47:80:c6:20:b5:ba:
52:95:69:23:b5:cd:1f:69:0a:04:56:4e:56:d8:2a:ed:08:4d:
97:ff:9a:1e:fc:42:36:95:5a:ff:19:24:54:89:c7:4d:35:df:
f4:ef:35:cd:a1:c5:6d:f0:86:c6:d6:53:6b:4b:a1:a3:32:29:
83:c8:d5:9f:96:f7:6b:4a:34:91:8d:8a:3e:b1:a7:d4:10:4a:
89:12:2d:90:f2:76:fe:03:0d:72:f7:e5:17:5a:f5:c6:d0:c9:
c2:7e:12:3f:e1:42:9a:b6:76:ca:3d:ed:fb:58:30:30:e4:19:
6b:6c:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:30 2025 by rpki-client