Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: 4VRJg8cHMiDOqPUZMaXkGjsdAaK1BZfaETYB1kOfswo=
Subject key identifier: C2:0A:83:C6:14:FA:5C:94:A7:5C:7E:13:9A:04:C1:96:21:0D:C4:70
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 01987D8B9934410F2B1F34B94DEB5AE31C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 156D
Signing time: Wed 06 Aug 2025 04:02:37 +0000
Manifest this update: Wed 06 Aug 2025 04:02:37 +0000
Manifest next update: Thu 07 Aug 2025 04:02:37 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: 92EnHJcFE1RvFfcuWHMidn1Rj9PqAtvV4L8KtABhOSk=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:99:34:41:0f:2b:1f:34:b9:4d:eb:5a:e3:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Aug 6 04:02:37 2025 GMT
Not After : Aug 7 04:02:37 2025 GMT
Subject: CN=c20a83c614fa5c94a75c7e139a04c196210dc470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:2f:5a:c8:cd:47:dd:78:6e:69:64:06:c6:
8c:62:50:74:01:b4:df:4a:fe:47:b6:48:5f:ee:b1:
1a:43:fe:fc:97:c2:d8:aa:b0:38:3c:f0:c2:ed:ff:
fe:f2:9b:07:0d:9a:c4:c6:b9:35:b9:f7:11:e2:71:
c1:72:28:7f:68:a5:f5:17:17:ef:09:5b:35:07:c7:
cc:b8:99:7c:ed:82:74:f3:f3:8a:14:6c:29:e3:a6:
22:3c:df:07:a9:e1:3b:40:cd:c8:88:cf:01:f0:f2:
37:9e:0a:ac:1c:be:27:0e:d1:4a:25:f6:6e:24:67:
fd:e6:59:e9:41:c6:5f:3d:4b:e2:44:7f:7a:95:a7:
54:96:b9:5a:8f:aa:f1:c4:73:fd:13:a2:ee:1a:04:
e9:82:fd:7a:7d:b2:38:c0:d6:9c:e7:20:bd:df:34:
86:74:4d:88:71:0f:0d:36:2a:b6:fb:f7:5a:a3:cb:
3a:fb:c7:c2:30:3f:93:07:18:51:b6:64:0a:be:56:
aa:e2:80:ad:13:41:c4:bc:d2:53:0d:3c:0e:69:a2:
05:34:8a:56:83:13:23:b3:0c:ec:dd:49:3d:0f:26:
92:9d:de:cf:be:9e:08:68:10:45:50:bb:75:bf:1b:
67:58:c6:f0:09:41:31:eb:f8:de:97:e6:ba:a6:31:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0A:83:C6:14:FA:5C:94:A7:5C:7E:13:9A:04:C1:96:21:0D:C4:70
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5f:12:a4:af:ff:0a:ae:fb:90:56:11:47:24:8e:9e:c0:0f:
f8:b9:42:f2:16:57:4a:8a:23:e0:07:50:7d:12:b5:5f:6d:98:
87:85:f1:ff:43:7b:8a:e3:11:1d:e9:ed:8e:09:fe:b1:0d:2e:
0a:a5:ba:94:04:0f:e5:26:ec:26:d8:c6:68:70:d7:f3:be:40:
03:90:ea:85:4a:27:b2:a7:a0:e8:55:49:a0:3e:c2:0d:d3:13:
3a:74:99:78:af:3c:e4:db:eb:3a:e8:17:25:a4:dc:47:26:ec:
33:2f:9a:19:a1:85:d7:4c:1c:18:00:67:a4:42:ad:c8:68:d2:
fb:f4:e3:ef:29:de:c8:c2:0b:eb:f2:33:84:65:4d:1c:02:93:
63:ea:1b:ee:db:a0:92:dd:86:d4:19:9c:ce:16:06:e6:9c:68:
fa:82:f3:c2:55:07:96:ea:93:8b:5e:e0:0f:c2:2e:61:41:b8:
c2:62:d3:ff:ee:cb:9b:7d:bc:d3:c9:74:39:9b:1a:5f:fb:95:
2f:95:d2:7c:8d:d8:fc:28:00:90:81:2c:47:e8:ec:49:2a:54:
74:d0:ea:f8:ab:49:dd:12:96:c5:9f:fa:d2:82:42:27:e1:41:
94:02:20:32:f3:8e:c4:fd:25:34:de:02:52:cc:3d:97:eb:97:
dd:89:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:15 2025 by rpki-client