Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: XY1+fBwKHomy/RN65HFwhi9IWSJnEyEL6y2urZeqkpA=
Subject key identifier: EB:5E:09:71:D0:E7:42:BA:7D:0A:D0:E8:3C:EF:00:49:C0:BF:51:59
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 01987B9D50F2617B9E0D68C86FB707555D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 1573
Signing time: Tue 05 Aug 2025 19:02:44 +0000
Manifest this update: Tue 05 Aug 2025 19:02:44 +0000
Manifest next update: Wed 06 Aug 2025 19:02:44 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: p3n0zhAxfIbsTI7SpAIb0clXNvT+IgmyzcQHf+Tvyr4=)
2: I8hH4YeV3HM0yWrc52lfIOhYTt8.roa (hash: colmP8j9TQydvYGFc1+glmJgVJjDM5AxsV+6TerMW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:50:f2:61:7b:9e:0d:68:c8:6f:b7:07:55:5d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Aug 5 19:02:44 2025 GMT
Not After : Aug 6 19:02:44 2025 GMT
Subject: CN=eb5e0971d0e742ba7d0ad0e83cef0049c0bf5159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:96:03:aa:6d:ca:c5:d2:d5:8b:c1:24:ba:
3a:35:da:6c:69:b4:55:f2:dd:ec:da:a5:dc:8f:42:
8b:8a:6f:cd:1c:74:3d:07:ad:c0:3b:66:4b:04:64:
6d:42:f6:a0:74:55:b3:ad:50:ac:67:70:50:9b:57:
4e:d3:d2:fe:05:54:a6:40:5c:1c:0c:2e:6a:29:8e:
34:71:25:f9:4d:13:47:d1:47:74:e9:76:04:fd:42:
8e:97:8e:c0:4b:fb:e3:cb:f3:e4:40:ac:b1:6b:d4:
cc:1f:bb:0c:43:29:b6:fe:09:3f:43:f4:72:6d:fb:
11:37:34:9f:5a:4b:96:11:61:ed:07:c5:c0:c3:0d:
81:04:0f:69:73:ce:99:8a:8d:be:fd:f9:94:15:8c:
8f:be:71:6d:0b:fd:74:78:ec:d3:57:3d:34:61:83:
b2:f0:3e:97:85:56:49:2c:48:7c:93:c1:00:5a:e1:
ec:b3:47:59:9b:6b:f6:d4:af:f2:15:67:7d:87:17:
93:b0:b8:53:ad:ba:ef:41:e8:c8:97:59:c3:75:36:
43:30:12:9c:8f:6b:e2:ca:70:e7:68:e0:b6:b1:02:
cd:87:72:d8:b1:49:b8:63:6c:35:7c:99:b3:f7:5c:
26:3c:2e:b0:84:d6:ea:a8:ed:dd:d1:b1:f9:d6:ba:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:09:71:D0:E7:42:BA:7D:0A:D0:E8:3C:EF:00:49:C0:BF:51:59
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:62:ad:87:7b:bd:d8:bd:18:f5:a5:a2:b2:bd:b5:ee:9d:8b:
a4:18:26:94:16:91:af:30:c4:db:34:93:c0:d2:44:d0:49:ca:
2a:1b:ef:b7:f1:60:5b:0f:c7:1b:77:1c:e8:cf:05:db:85:33:
cd:e7:53:d0:cd:92:df:73:21:83:e1:f0:63:b3:27:63:8e:56:
0d:5a:4b:39:e3:2e:23:15:ad:d9:fa:de:bb:1f:59:15:7a:c0:
ef:57:66:2e:a5:85:d4:ec:87:5b:21:49:05:a8:9e:c1:3a:4f:
d5:43:d5:4b:d0:43:42:d1:12:68:54:0f:d7:b2:a1:62:34:43:
f3:ac:70:49:6d:8a:d3:e5:ac:9e:8a:fe:f9:71:2e:c9:35:a6:
05:b1:09:f8:a2:a3:5e:d6:c2:cb:44:74:af:be:12:d9:85:c8:
15:81:5c:78:0c:4a:28:fb:6b:89:6d:48:e6:58:c7:d8:7b:81:
6e:dc:ff:86:ec:a3:9e:1d:8e:66:74:4c:f9:01:e3:8e:06:35:
77:c6:f3:e0:d5:45:71:15:4c:7f:d6:e8:d4:6d:1b:b0:d0:7a:
f5:e2:5d:34:ae:f3:32:3a:a9:d5:83:0a:53:b0:6f:ae:79:82:
c0:4d:2a:21:c2:72:28:4e:ad:90:dc:3e:ee:81:86:10:48:07:
e0:ef:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:43 2025 by rpki-client