Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: FIdhaxWO7scNfmAZK0ByvMy2Gk/6sBKq+j/MtKf5yrY=
Subject key identifier: F7:4E:78:B6:74:EA:AA:14:0C:E9:67:61:D2:30:A5:EC:8E:A8:CA:00
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01987DF861065E1F85100A4697563D791194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0F03
Signing time: Wed 06 Aug 2025 06:01:26 +0000
Manifest this update: Wed 06 Aug 2025 06:01:26 +0000
Manifest next update: Thu 07 Aug 2025 06:01:26 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: xPXxOxgQo65G4gY1cDj69JjmihtahjxVAziFzWtOgfg=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:61:06:5e:1f:85:10:0a:46:97:56:3d:79:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Aug 6 06:01:26 2025 GMT
Not After : Aug 7 06:01:26 2025 GMT
Subject: CN=f74e78b674eaaa140ce96761d230a5ec8ea8ca00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:43:df:47:4e:dd:da:ac:32:b8:84:1f:17:
4a:12:f9:da:c9:5a:8e:86:d6:4e:fe:f0:15:7a:c3:
7e:fb:08:56:d3:5b:d4:30:fb:19:9c:81:45:63:dd:
f9:9e:37:4e:05:a8:10:cd:c8:5a:7e:f8:f4:4a:e7:
b2:56:fc:20:86:de:9a:88:71:32:2c:d3:1e:a5:c3:
95:e5:83:83:8a:15:8e:d3:3c:b7:56:af:ad:60:ae:
c1:33:49:2e:12:98:23:03:b0:d3:62:07:6d:15:df:
e2:82:11:5f:9b:63:e3:32:0d:88:89:79:b5:12:f0:
12:54:08:1f:49:8d:44:2f:52:30:4c:dc:62:bc:52:
4c:0d:f8:22:f8:98:c2:63:98:92:0b:33:3b:6e:46:
29:4c:6b:21:49:23:df:df:8e:62:58:cb:25:3a:1d:
59:a3:8d:b4:2f:78:95:be:c7:2d:b1:d5:5b:f3:7e:
3c:33:47:50:22:49:df:7e:73:12:df:25:b0:4d:db:
51:a0:50:04:06:03:f5:14:4b:01:09:c1:e3:a4:6b:
8f:5d:ef:e6:29:a9:47:80:aa:83:36:1e:cb:66:37:
27:69:b1:3d:9e:ad:2b:5a:8a:ed:e7:cc:81:96:98:
6d:f0:1d:7e:4c:54:6e:87:4a:c7:fa:da:4e:60:73:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:78:B6:74:EA:AA:14:0C:E9:67:61:D2:30:A5:EC:8E:A8:CA:00
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:8f:71:31:70:cf:0b:50:f1:1d:52:94:58:a2:49:ae:9c:
f3:a8:81:01:dc:07:0c:86:13:e3:24:05:9f:5c:9e:7e:f6:bc:
5c:6c:f2:63:79:ba:a9:aa:ca:89:ba:ff:0c:4a:45:6e:ea:63:
c9:83:3f:9d:ab:6d:61:8a:61:90:1b:15:ee:03:50:4a:f8:07:
3c:af:11:69:3f:bf:cc:a4:e8:9a:2a:a9:7e:57:99:c4:b1:ca:
cd:02:92:82:d7:83:62:46:ba:d4:68:09:fe:23:21:55:35:2e:
4c:b8:15:d7:f0:f9:1a:49:fc:47:2c:b5:9f:fe:e8:51:d7:65:
58:a5:97:7c:19:74:3c:13:5b:7c:da:c0:2b:6c:cf:82:f8:87:
36:c9:5a:21:91:e8:7c:83:b8:1a:72:aa:db:e5:05:38:42:9e:
ad:91:45:86:2c:de:04:a2:ac:0d:b4:48:7d:75:49:00:9c:00:
11:71:f5:6e:eb:dd:00:ea:ce:15:bc:05:b0:40:e4:e4:49:9a:
3a:da:13:9c:2e:db:dd:5e:5d:f3:0b:d1:9b:15:bb:81:f8:58:
3e:0f:a5:ab:2a:c5:4b:de:a7:b2:15:ea:af:6a:d3:be:34:79:
cb:88:c8:de:01:f8:a8:7b:31:2c:87:5e:8f:cb:6f:e1:78:05:
15:ad:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:55 2025 by rpki-client