
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: cIMdh8Q0xafxtUXE37K57h1ExgBfm48JgovaFUv21QM=
Subject key identifier: 92:A1:15:76:EF:F9:A7:D5:95:09:B8:9C:80:A4:38:B3:00:92:8D:2D
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 01976929FAA698A4BCA924996B301D9830D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 0594
Signing time: Fri 13 Jun 2025 12:00:48 +0000
Manifest this update: Fri 13 Jun 2025 12:00:48 +0000
Manifest next update: Sat 14 Jun 2025 12:00:48 +0000
Files and hashes: 1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: cDPyujqcvzUgULGbxKhAvwB7n+/W9/c5OL31/3sm/vM=)
2: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (hash: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:fa:a6:98:a4:bc:a9:24:99:6b:30:1d:98:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: Jun 13 12:00:48 2025 GMT
Not After : Jun 14 12:00:48 2025 GMT
Subject: CN=92a11576eff9a7d59509b89c80a438b300928d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:93:c4:92:d2:08:80:0d:04:04:5d:af:f7:
2b:c2:c1:70:6a:ae:76:01:2c:56:c9:74:87:2f:72:
38:41:21:a6:ed:2d:f7:f3:b2:21:40:3a:37:9f:c9:
da:74:a2:44:9e:0c:31:47:10:07:79:1b:e8:35:95:
4e:ab:7f:08:d5:16:9e:b2:49:01:b0:7f:56:7a:7a:
35:fb:89:f7:d4:4a:b3:58:3e:a3:c5:bc:ce:2a:16:
49:ca:3d:06:30:59:be:7f:ec:d0:4f:b7:ac:be:cb:
b4:c2:f7:80:46:e9:99:be:d1:fb:b6:b2:74:f1:e3:
ed:84:84:14:fe:4f:77:a3:1f:e2:05:07:52:72:39:
4d:3b:4b:a7:84:3a:7f:e9:23:0a:96:95:ce:5a:93:
02:00:ae:ce:9c:b0:f6:e8:c4:ee:3a:82:82:47:db:
e4:1e:81:d6:9b:5c:b3:9c:2a:53:f4:48:67:d6:76:
af:21:7e:0d:98:ee:c5:c9:26:61:dd:ec:ec:73:70:
ae:5d:e1:43:d1:95:e0:36:a7:38:c0:91:e8:c9:56:
3a:c8:83:dd:cd:22:ab:9d:51:a4:42:2c:2a:39:51:
95:99:65:e4:a0:c5:e4:d0:8b:1c:0a:6e:dc:ea:a4:
49:61:fa:69:ba:e5:ff:b8:16:b4:a8:e2:ee:71:0f:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:15:76:EF:F9:A7:D5:95:09:B8:9C:80:A4:38:B3:00:92:8D:2D
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:67:ca:6f:fa:13:d6:7d:4a:3e:eb:d0:6a:68:e8:84:6a:b4:
6d:fe:74:12:a5:17:09:b2:5c:98:12:b3:3e:89:6b:5b:f8:32:
6f:af:99:cc:9c:6d:a6:27:1b:c4:ab:4b:a5:09:48:75:42:8a:
a3:31:0f:e3:05:68:de:1b:b4:a9:86:4d:49:ec:53:d8:b9:96:
29:bd:ea:c2:98:e6:88:57:f4:df:72:1e:cf:ab:76:31:1f:29:
23:19:91:2f:29:27:31:d0:87:74:15:20:af:7d:df:08:1f:81:
d9:28:cf:04:9a:c9:2f:15:d6:86:f2:12:1d:51:99:cb:67:ba:
92:c1:8d:75:96:33:df:b6:12:f9:79:4c:d4:88:9b:fd:80:0a:
6c:a3:40:17:5e:2e:68:10:27:11:8e:a8:1c:47:d5:5f:38:40:
33:30:a0:75:e7:b2:a2:de:52:17:d9:6a:cb:d1:08:eb:2d:df:
f2:03:fb:f1:4f:71:c3:5f:7f:fd:34:a8:5d:f0:44:e1:12:c8:
cb:e9:13:f7:61:22:e9:24:5f:c7:10:ca:fe:5c:d1:96:7c:b2:
11:63:c9:b3:3f:9e:c7:3d:f3:87:41:58:a9:ae:55:2f:f8:80:
52:2b:37:53:6e:ec:14:5f:6a:5e:ec:aa:a6:96:b1:e0:d6:dc:
e9:95:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:08 2025 by rpki-client