Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: QVz1KRunTey0hrvgnf9f19rVUyzLCikCSO68F2qyBH0=
Subject key identifier: 91:E3:55:35:CE:BA:FB:A6:7C:65:B6:A8:62:27:BD:48:CB:C7:9B:28
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 0198808B2DC37377EE0F87103601964A196D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0509
Signing time: Wed 06 Aug 2025 18:01:01 +0000
Manifest this update: Wed 06 Aug 2025 18:01:01 +0000
Manifest next update: Thu 07 Aug 2025 18:01:01 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: ZTA1JRmUmRO4VynVa298Ijr0g91xgWOssKKAqeYgzbo=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:2d:c3:73:77:ee:0f:87:10:36:01:96:4a:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Aug 6 18:01:01 2025 GMT
Not After : Aug 7 18:01:01 2025 GMT
Subject: CN=91e35535cebafba67c65b6a86227bd48cbc79b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:e4:c9:91:23:68:de:be:6b:8b:7b:ad:37:
15:9f:41:24:d6:05:8d:e8:15:e6:49:0e:93:83:68:
0d:f7:a2:3d:d3:a6:22:d5:c9:c4:cd:59:7f:db:6b:
9e:ef:3b:07:5d:29:36:52:93:d8:4c:a4:69:b7:b8:
38:dc:28:fc:0e:80:b3:37:f7:e2:f3:3c:00:18:95:
e0:09:33:0d:78:89:ee:1f:2a:81:f4:72:7b:9c:80:
71:9a:ce:07:72:68:28:29:a5:9b:97:66:be:e2:f7:
9d:ae:83:d9:38:51:2e:45:3d:2a:5b:df:57:d4:2a:
28:8b:e6:87:61:61:ef:d8:17:d7:21:ac:51:82:25:
9e:05:5c:aa:8d:f6:8b:ee:2e:1d:d7:10:53:69:21:
46:c5:cd:10:2c:58:c2:cb:67:53:76:28:11:c0:fa:
fa:14:19:a9:f3:d4:9f:4c:d0:3c:4f:31:d9:9e:bc:
c8:c8:fa:f8:9a:58:a6:8d:8b:01:bb:40:4c:cc:f6:
4c:0c:c9:d5:58:cb:90:98:39:f3:95:a9:98:74:36:
b9:13:8b:fc:81:63:99:28:7a:67:8f:71:3e:d1:4b:
3d:de:84:91:e1:64:0e:1c:3c:94:9b:38:03:8d:4e:
b7:0d:39:f3:fc:ab:18:84:75:68:35:63:45:92:ec:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:55:35:CE:BA:FB:A6:7C:65:B6:A8:62:27:BD:48:CB:C7:9B:28
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:38:3c:41:bf:cc:95:66:f1:54:2d:57:3f:f3:ac:16:cf:
11:6a:ce:86:39:85:77:5f:48:23:7a:39:f5:de:91:ee:8e:d7:
10:9a:d4:27:44:6c:b4:9c:33:29:bd:1e:08:73:51:82:96:de:
bb:19:29:0b:c3:89:87:5d:63:44:f7:bd:0a:69:f4:83:b4:f3:
06:ac:09:66:bb:3d:bb:3d:34:7c:2d:5c:42:d5:53:37:64:17:
23:cb:6e:ae:34:79:aa:b0:7f:74:b1:b0:29:93:fe:3f:f6:11:
17:a3:89:e7:ea:c5:8f:f8:6e:bd:ff:ce:d6:53:72:3c:e6:f1:
7a:dc:92:0a:f1:1b:cc:5a:be:4a:e8:d7:da:73:cd:ea:76:15:
1c:86:a8:aa:12:19:d8:af:33:ad:7a:47:eb:16:36:7c:38:0e:
8f:5f:85:be:f1:cd:df:98:4b:f2:86:fa:12:b0:80:3a:1f:36:
be:b8:bf:a4:1a:5d:44:62:31:29:10:ad:9a:a2:55:9c:54:fc:
a4:a7:57:48:ff:6d:d1:56:53:4d:e3:c3:fc:77:5e:a4:3a:72:
53:f2:e9:33:58:66:e4:46:b7:c4:7a:ec:8b:76:bd:34:58:b1:
46:95:c0:b0:52:fe:b6:cb:45:7a:d1:30:16:b8:6c:d4:26:e4:
f4:35:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:46 2025 by rpki-client