Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: nng1CCv2cMNJc6wminBPha3HXggsQEijsbZ4Yom+CH8=
Subject key identifier: 8C:F4:C2:A7:70:97:43:54:3A:64:F6:51:55:50:51:E2:4E:83:0D:6B
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 0198974A16BF67E9302B4A528949303B1918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0B9E
Signing time: Mon 11 Aug 2025 04:01:11 +0000
Manifest this update: Mon 11 Aug 2025 04:01:11 +0000
Manifest next update: Tue 12 Aug 2025 04:01:11 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: wx1RjoSJITG8U7UX1XtWWtTkyZ78c18tb4TzvI2IPeM=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:16:bf:67:e9:30:2b:4a:52:89:49:30:3b:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Aug 11 04:01:11 2025 GMT
Not After : Aug 12 04:01:11 2025 GMT
Subject: CN=8cf4c2a7709743543a64f651555051e24e830d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:f5:85:c5:52:4f:9c:e3:50:e6:c9:ad:46:
fa:b1:8a:3d:5d:e4:b3:62:3b:a3:d3:02:35:e0:0e:
63:cb:71:3c:e4:59:9e:db:c6:a7:23:1e:1b:e9:7d:
1e:c2:da:c3:3e:0a:a2:f5:a7:53:58:70:89:d1:13:
66:14:b3:a2:d5:b2:68:5f:72:a0:62:27:a2:46:72:
d1:5c:ff:3f:ec:2f:fe:f0:5d:30:3e:69:8d:2f:3b:
f1:da:f3:ec:83:d8:6e:e8:8e:a6:88:d8:69:1c:d5:
16:ef:6c:0b:55:79:9c:83:cf:f4:0f:ca:d8:8c:fe:
d0:f6:27:75:39:77:8a:89:82:a3:8a:96:77:25:a4:
8a:a8:7e:60:6d:1f:4e:9c:da:60:45:77:e0:fd:50:
68:f5:0a:46:bd:2e:01:29:c3:0d:f0:2b:80:1d:56:
29:f0:47:e3:f3:c4:5b:ee:9e:c2:9c:56:a2:4e:33:
26:d7:7e:cc:67:0c:49:ad:45:14:3f:7a:6e:cd:02:
d1:f3:ba:cb:00:2d:b6:27:02:4e:f1:6c:0a:cb:1e:
ad:40:3f:c0:5a:f2:d2:06:25:57:a9:9d:02:44:c3:
2f:74:ee:d6:62:e4:45:4d:ad:2f:f5:15:67:19:6f:
1a:8c:d1:9f:4c:30:61:2a:5b:38:e1:9b:eb:7b:1a:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:C2:A7:70:97:43:54:3A:64:F6:51:55:50:51:E2:4E:83:0D:6B
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:17:db:6f:71:3f:04:e4:09:7d:b7:4d:a8:6c:92:ab:14:
95:8c:5a:8a:a5:fb:2f:64:87:a9:e7:e0:86:9b:e1:f9:b6:39:
cb:9e:8b:19:7c:80:88:9b:97:a1:3d:be:c1:0e:58:54:4c:07:
7c:f3:de:20:88:d5:54:65:d5:1b:f7:da:9e:dd:1b:e3:a4:7b:
c2:5b:2f:5b:b4:9e:8c:86:f0:42:6f:1e:b0:5b:8a:4a:73:a1:
ed:43:c0:90:b4:30:63:3e:25:2c:0c:b1:b0:de:7d:f6:67:69:
96:16:09:84:aa:25:93:eb:44:04:7a:9e:b9:bb:1c:63:73:3b:
97:8e:1b:9e:5c:72:35:d0:1b:bb:de:5d:a7:23:a7:af:51:14:
0b:61:c4:e1:5e:c5:fa:58:c2:27:01:f5:a0:af:a3:a5:cc:d8:
e6:c8:f8:90:8b:66:3e:1a:4c:c6:6a:d7:3b:da:9d:33:28:4d:
d3:9a:92:2a:84:c7:e3:a0:00:09:9a:3e:24:c4:6c:1e:fa:35:
45:be:90:b6:9e:45:04:30:2e:e8:46:cd:64:c4:75:8c:8d:d4:
54:9e:68:a2:bf:4a:c1:eb:b7:8a:10:d5:31:27:cc:36:34:2a:
3b:ea:ac:ee:57:be:54:77:9b:f5:7f:a2:3a:81:24:e2:dd:10:
b8:3a:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:37 2025 by rpki-client