Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: yqQQiiqa+ckptatwPEeABitpIaHwN9cIcFRs7ZcJMQo=
Subject key identifier: 9D:CB:D4:74:CF:3D:29:22:A5:9F:B4:6D:9E:67:DE:1D:E1:61:07:5E
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019892C9EACA17022CC143D3FB342A68483E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0CFC
Signing time: Sun 10 Aug 2025 07:02:43 +0000
Manifest this update: Sun 10 Aug 2025 07:02:43 +0000
Manifest next update: Mon 11 Aug 2025 07:02:43 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: cUmk+Q9sMOH1KpPZ+PINYnayIHJt0zZ6kH36FmtOdC8=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:ea:ca:17:02:2c:c1:43:d3:fb:34:2a:68:48:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Aug 10 07:02:43 2025 GMT
Not After : Aug 11 07:02:43 2025 GMT
Subject: CN=9dcbd474cf3d2922a59fb46d9e67de1de161075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:d2:1a:28:b7:73:8a:e8:1d:fa:23:54:cd:
5c:57:37:f9:c7:01:f3:60:a9:d6:b5:d2:49:6a:66:
71:e6:dd:1a:23:bb:c3:82:f0:74:1c:e5:af:ea:b7:
cf:7b:2e:b2:b4:5c:77:77:d6:f0:8c:85:ef:cb:52:
f7:70:d7:e2:1b:0f:5d:3b:02:ae:6d:cc:0e:e8:44:
8a:e8:8f:16:38:35:f6:45:97:88:9f:6d:2e:16:84:
2d:63:12:1e:12:81:1f:71:92:c3:3f:f1:75:1d:84:
a3:57:83:10:6e:b9:19:f3:2b:af:c3:92:78:da:1f:
49:36:60:69:3d:b4:3c:f7:0b:f6:bb:93:b2:56:33:
2c:51:eb:84:d8:5e:37:f9:d8:1c:c4:44:d2:c4:c7:
c6:34:2c:fa:65:da:7f:18:18:b9:96:ee:7c:bd:2d:
16:ee:09:4a:db:3c:10:60:6e:5a:eb:26:3e:4f:3d:
ff:53:63:52:8b:a2:81:21:12:3a:87:a3:de:06:1e:
44:57:2b:e2:98:e2:98:09:26:b4:3b:32:1d:7a:5c:
6a:34:9c:60:ff:0c:9c:f6:8d:10:38:c2:c5:66:09:
7a:ec:8a:b3:d6:20:92:73:cf:b0:06:71:c2:2b:ac:
49:91:b5:21:74:e2:a4:45:22:84:d5:b2:6b:cb:dd:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:D4:74:CF:3D:29:22:A5:9F:B4:6D:9E:67:DE:1D:E1:61:07:5E
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:ac:1a:a8:b4:47:7b:d1:b1:f0:7c:70:14:12:df:a2:f5:
b9:38:2e:6f:ed:ce:2b:cc:43:dc:d1:5c:04:32:a6:31:7b:58:
fc:56:65:bd:5e:d4:62:7f:e8:25:8c:ce:d6:90:bf:83:7d:a6:
d0:91:5f:86:ae:08:eb:af:7e:26:9a:19:b7:28:67:86:46:be:
2e:39:54:5d:1e:4c:b1:80:8e:67:36:e1:20:b2:0c:15:11:6d:
7d:89:ec:76:e0:38:a0:ca:b3:6d:a1:cd:a1:62:95:00:90:d2:
8b:5a:8c:41:00:24:8f:19:8f:f8:c1:8e:23:3a:9a:6b:6b:e8:
0d:1e:77:44:a3:92:66:d6:c0:67:cb:d1:56:70:d0:e3:42:eb:
50:4f:22:25:1d:d8:11:2b:13:97:02:d5:56:66:47:12:e4:95:
0b:b1:7f:e4:76:39:05:aa:62:f4:94:31:3b:0e:fd:a4:79:58:
73:2c:72:11:10:3a:bc:e2:79:7d:6e:ca:4c:21:ff:af:57:15:
7b:d1:8e:72:57:83:61:d9:47:d7:60:67:0f:6d:bb:43:4b:1a:
0d:77:27:51:28:15:c3:48:4f:a0:0b:b4:c9:b5:4b:6e:fb:3a:
93:1f:5b:45:65:23:40:25:b2:a3:c8:3e:74:4b:91:db:14:bc:
29:4e:fb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:58 2025 by rpki-client