Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: kVrJy8s4KN0+DLb2yLY7yWTnRr5RrnK/Tayvpr3+kQU=
Subject key identifier: C5:AD:92:B1:2A:7C:81:5C:2C:EF:85:80:6D:84:1C:2E:48:71:8D:F3
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01977376E7E1D9819CEA393ABFF476994A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0E79
Signing time: Sun 15 Jun 2025 12:01:01 +0000
Manifest this update: Sun 15 Jun 2025 12:01:01 +0000
Manifest next update: Mon 16 Jun 2025 12:01:01 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: Ucw/6Vzz73tw9Ips91uRRZyaIvTjmPj8oYk0XLVPe9o=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:e7:e1:d9:81:9c:ea:39:3a:bf:f4:76:99:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jun 15 12:01:01 2025 GMT
Not After : Jun 16 12:01:01 2025 GMT
Subject: CN=c5ad92b12a7c815c2cef85806d841c2e48718df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:20:d5:24:eb:c1:e4:a6:89:62:5d:b1:39:
7a:be:02:e9:48:8d:83:d8:75:12:51:24:b0:8a:d5:
e1:69:b7:04:ef:fc:02:63:08:a0:98:2c:bc:a8:67:
ae:b9:df:8e:e6:91:a5:21:9b:0b:19:5d:41:75:e9:
2a:6b:97:f1:29:1b:37:fd:1a:34:c9:d5:5c:d9:8b:
bd:fe:3a:b6:35:dc:92:66:53:8f:ac:7a:57:db:b3:
9e:8f:7b:dc:df:e4:a9:59:2b:bc:ed:b9:23:1e:29:
15:af:2b:ad:43:0b:1b:f2:13:8b:c9:7b:15:d9:07:
be:90:ee:8a:4e:9a:a7:e0:23:3b:c0:4d:a2:66:f5:
61:6b:1a:f7:f4:69:ea:6b:93:88:fd:62:81:45:cf:
ca:79:37:5a:f1:7b:84:22:47:c8:59:c1:33:fb:5c:
f4:c0:0e:0e:2e:bd:be:3c:09:29:42:dd:e4:92:2a:
bc:cf:8d:2f:48:8c:db:a5:8d:df:76:a8:ac:85:be:
8d:ce:e2:fc:60:b5:ec:0e:f9:82:bc:7e:61:31:4e:
97:cf:6e:d1:b0:c1:17:5c:17:7e:be:54:06:75:25:
3c:69:1d:d5:53:a9:6b:20:99:84:d2:4f:54:94:71:
f3:09:37:3b:6a:bd:3a:d3:db:6d:09:3c:49:7a:8d:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:92:B1:2A:7C:81:5C:2C:EF:85:80:6D:84:1C:2E:48:71:8D:F3
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:f2:b3:2b:b8:b3:47:29:2c:93:d1:be:c1:57:03:69:1a:
9b:ba:d6:62:d8:34:2b:9c:9b:4b:83:6b:4d:e0:80:3a:c9:32:
bb:9f:3e:85:41:d9:da:c7:16:9d:ba:fa:91:a7:71:a2:0f:c5:
91:e0:a0:80:37:82:c5:c3:2a:11:6f:f2:10:52:7b:38:09:eb:
73:9b:bc:61:8b:73:ee:fe:d5:e8:37:a0:84:d0:dd:f9:92:ed:
2e:e9:93:c4:b6:e9:67:21:4b:74:6f:41:be:4d:51:5c:b8:82:
a1:80:c6:9e:69:ef:b2:e7:19:3f:d3:38:cd:77:83:64:56:db:
7a:57:c2:0a:93:ff:ee:2c:a0:60:f1:7e:5e:01:a2:2a:6c:47:
71:59:ba:25:0e:51:d3:7e:d6:56:68:23:b3:ce:7b:91:6a:9b:
86:dc:07:00:8a:36:ec:0d:b8:a6:40:06:ed:f4:3b:69:c6:a3:
bd:ca:7c:df:91:f3:28:3b:56:88:c5:bc:f1:a3:e5:63:58:0c:
d6:1b:28:27:f7:32:54:13:fb:42:34:8f:66:76:44:19:a1:58:
00:2b:38:7e:4f:dc:40:1c:14:4d:38:27:78:04:33:40:23:20:
d9:2b:ef:1d:8d:8e:75:ad:99:5e:ef:38:a4:9c:bf:c9:d6:e2:
81:58:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:47 2025 by rpki-client