Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: b6kG4qwMQEgeDGctsij91BKrbUehNekE1e0KUKh/0KY=
Subject key identifier: 60:46:1B:ED:8D:33:93:F8:80:87:1D:41:ED:5E:CE:A3:23:06:EB:5E
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 01989525040699555498B790717EC0DC3F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1023
Signing time: Sun 10 Aug 2025 18:01:27 +0000
Manifest this update: Sun 10 Aug 2025 18:01:27 +0000
Manifest next update: Mon 11 Aug 2025 18:01:27 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: G57eCtaQeZZ1lSpKUJxe6qVy6IbMSdXtgrFZv3CIDRA=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:04:06:99:55:54:98:b7:90:71:7e:c0:dc:3f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Aug 10 18:01:27 2025 GMT
Not After : Aug 11 18:01:27 2025 GMT
Subject: CN=60461bed8d3393f880871d41ed5ecea32306eb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:f6:d5:da:74:41:cc:a3:b3:f4:0b:c7:93:
20:dc:8b:bc:51:5e:eb:a8:24:17:38:f5:8e:93:22:
ba:37:e7:50:02:67:c4:e0:69:67:53:92:0e:75:16:
3d:14:0e:c9:c2:8c:60:37:af:75:ff:06:4e:6e:77:
a3:2e:25:29:d6:40:4f:b5:d4:01:4c:5a:3d:88:33:
7d:50:26:d2:80:29:33:a9:22:c1:9c:25:d6:bd:f9:
f3:4b:06:dd:9d:ce:90:68:84:50:97:ae:5b:fe:43:
2b:ec:4a:2a:d5:08:f5:16:05:ff:cb:29:26:70:55:
28:43:66:52:42:ed:39:2b:f4:50:20:22:10:54:38:
3b:c5:2c:b0:0f:25:19:a7:bd:fe:8f:4d:70:aa:ec:
1f:36:be:9d:a1:b8:10:33:ad:53:c3:e9:09:09:7b:
27:ed:9c:2f:a7:59:65:1b:83:38:62:91:dc:59:93:
3c:78:8b:ae:17:b3:56:73:b5:a3:a2:3f:4d:93:d9:
ff:bf:1c:e0:e8:71:e6:3b:be:f4:eb:5f:f1:25:0f:
fb:3e:72:8f:5e:dd:86:9c:81:a3:38:e8:d3:3b:12:
d8:4f:dc:bd:fe:b3:b4:d4:9f:22:af:98:58:ea:f0:
84:ef:4a:e8:47:7d:6f:5e:23:12:d7:8a:ea:a6:4c:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:1B:ED:8D:33:93:F8:80:87:1D:41:ED:5E:CE:A3:23:06:EB:5E
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:21:7c:f6:ea:b8:be:ac:a7:33:eb:e3:bc:15:45:6e:a6:
ea:21:3b:f1:91:ae:bb:c4:ad:57:25:a5:dd:9b:f5:de:73:e2:
10:36:9f:59:59:42:be:c0:4d:ae:5b:39:f9:12:8b:9f:da:b8:
8b:98:63:a4:15:99:b3:ec:b5:32:ce:d6:7b:7b:cf:0b:ab:d4:
27:67:23:2a:46:1a:b0:35:57:10:04:0b:50:f6:7f:45:f4:26:
8c:9c:dd:f6:e4:e0:2e:52:89:f5:2a:23:12:05:9d:11:8f:43:
19:2c:bf:92:3e:9e:13:e6:07:1e:7e:e4:14:f4:dc:78:d2:40:
03:95:70:f6:cb:e7:0d:fc:c0:fb:ea:7f:ec:60:85:19:cd:a0:
95:c4:8a:a4:55:a4:90:d9:f5:31:7a:52:cd:b9:4f:09:af:22:
45:71:af:95:c2:0e:67:c6:a0:d3:4f:58:41:9d:a4:a5:38:1c:
27:f6:ad:70:a5:7b:85:4b:08:2a:81:66:11:52:d1:d5:00:d4:
5f:bf:77:41:01:d5:0d:35:84:58:13:71:63:0b:3f:24:4c:3a:
c4:a4:b4:52:4f:f3:94:e6:73:b2:66:f8:55:0d:88:94:c7:84:
bb:78:49:e2:43:d3:9d:ea:a6:25:2e:87:5d:00:b5:e3:f7:d0:
b4:df:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:29 2025 by rpki-client