Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: hfIlrsNxpkLSAIRqddywehaqjBsq4zgfBKKEzaPu1V4=
Subject key identifier: 79:38:84:6C:36:91:83:CD:86:CB:66:82:4D:CF:7F:5F:75:E2:E6:1D
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 01987DF876DAC724D45B377187C77B08E92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0A74
Signing time: Wed 06 Aug 2025 06:01:31 +0000
Manifest this update: Wed 06 Aug 2025 06:01:31 +0000
Manifest next update: Thu 07 Aug 2025 06:01:31 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: 5AoZYXBF9cQJvqVDLi1fHEua8lXIqRLDbptqFowJX1U=)
2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:76:da:c7:24:d4:5b:37:71:87:c7:7b:08:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Aug 6 06:01:31 2025 GMT
Not After : Aug 7 06:01:31 2025 GMT
Subject: CN=7938846c369183cd86cb66824dcf7f5f75e2e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:df:9b:a3:91:54:50:de:f1:1a:01:a5:21:
0c:c3:f7:89:61:79:65:8c:09:d6:0f:ab:80:6d:6a:
1d:c6:1c:ac:ef:9c:26:34:c1:43:c9:f7:ec:53:f5:
fa:ba:e8:8f:53:94:f2:19:22:b5:07:9e:92:60:4d:
d8:db:43:a5:85:c1:72:a0:de:60:6e:bd:3d:5e:6b:
c1:a9:08:05:5e:79:6d:43:9b:32:09:e3:d4:d6:12:
9e:2f:8c:a7:60:9d:13:4b:64:ef:ed:f3:67:c7:30:
75:40:df:bc:2b:f7:cc:af:93:81:12:d2:4d:18:d0:
f0:21:5d:f5:76:d7:70:f2:e9:67:ed:f6:bb:53:64:
0b:e4:d8:5e:b7:de:d6:b1:0b:6c:a8:be:7d:68:38:
4f:48:e4:3c:3c:51:7d:ba:4d:e2:5c:1f:50:06:39:
fd:84:6d:49:e6:07:d4:3b:56:f3:6a:5d:20:1f:ee:
69:29:25:93:9c:9d:8c:48:b0:bf:b4:66:23:75:2f:
4c:9a:b5:5d:00:4a:41:28:6f:52:2b:ae:0d:63:50:
4d:72:d8:16:7f:ba:dd:aa:6a:ac:68:86:2b:46:3c:
83:e6:75:48:bd:8e:1e:81:ec:aa:5a:ae:ef:c3:77:
5a:e2:3e:c1:2b:2e:1c:8e:ed:4a:d2:d6:15:cd:ac:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:38:84:6C:36:91:83:CD:86:CB:66:82:4D:CF:7F:5F:75:E2:E6:1D
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:6e:a1:94:ec:14:24:bc:d6:44:c2:99:f6:e7:3c:00:4d:
e2:fa:f8:2b:97:5c:9e:23:e6:4b:5b:80:e3:6d:d2:35:43:d7:
fb:bb:12:51:67:8f:04:08:7c:22:87:03:35:21:8e:71:66:ca:
ce:f0:ae:a9:ae:de:7d:ae:34:d2:c6:47:a0:2d:bf:fd:c1:ad:
00:a6:fd:5a:a6:0e:db:68:64:fa:c7:ac:cd:af:61:39:fa:09:
bd:7a:eb:80:e0:5f:8d:e6:fc:74:3a:86:4c:67:c7:e9:d6:e7:
64:1b:08:5c:91:da:f1:16:fa:35:50:57:23:09:58:85:8e:79:
24:04:5b:17:94:46:18:62:6f:97:f4:67:a9:47:1a:61:1b:d3:
f6:3f:a1:0a:6f:6a:00:fb:9e:9b:47:39:40:ef:87:c6:37:f1:
10:bf:d6:2b:17:2c:cb:83:62:5f:1e:c0:4e:ce:71:0a:b9:1d:
e0:40:96:58:b2:b6:0b:13:e5:df:4a:30:26:6a:70:fa:64:68:
e6:60:9c:c6:2c:f2:ad:57:47:6e:12:1a:f5:29:ed:8d:e0:f0:
a5:65:f5:0a:42:98:28:60:a0:5a:c7:f7:d4:5a:25:d8:de:31:
1e:93:26:0c:e1:3b:97:d0:59:ed:5e:0c:be:c8:65:92:1c:e2:
15:aa:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:37 2025 by rpki-client