Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: mxtnS3GbioEJnW2hnsPABwWZKSjUW0iy1VTZvmkkSOU=
Subject key identifier: 1A:BF:CA:B5:26:29:BE:A6:1D:4A:C5:EC:3B:1D:0E:40:FC:A6:E5:3E
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 01987298E6E0386E4322DFC5E7376B881E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 0520
Signing time: Mon 04 Aug 2025 01:01:19 +0000
Manifest this update: Mon 04 Aug 2025 01:01:19 +0000
Manifest next update: Tue 05 Aug 2025 01:01:19 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: bJVhxPCTV2aJY4vPxnMmkZ8lx3eVwoHqIG+iyHxwB9o=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:e6:e0:38:6e:43:22:df:c5:e7:37:6b:88:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Aug 4 01:01:19 2025 GMT
Not After : Aug 5 01:01:19 2025 GMT
Subject: CN=1abfcab52629bea61d4ac5ec3b1d0e40fca6e53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:3b:f0:bc:6d:8b:3f:99:10:a3:6f:9e:a3:
9a:b7:45:43:d1:42:51:e9:8f:7a:d7:eb:a4:18:9d:
b7:32:cd:00:2b:07:98:f1:d5:73:b8:83:95:d6:17:
6d:e0:df:b4:14:eb:8b:84:08:a8:51:50:fa:ef:3a:
36:ee:3b:08:af:5b:bb:06:85:0e:8a:7c:44:54:02:
9e:fd:eb:d9:02:fe:30:46:34:49:01:94:f3:cb:4d:
c9:1f:b8:c1:ef:fe:a2:78:0b:5f:d1:70:22:d2:73:
d3:b1:cb:bb:09:ac:0b:f1:17:c8:ee:68:41:0d:64:
f5:85:4f:b3:e1:06:59:5f:e0:78:17:d9:d0:70:62:
74:25:ac:cc:9f:26:92:f9:7a:a3:1d:d5:21:30:ad:
e0:d7:1c:68:7e:7d:30:4c:0e:eb:ef:7e:2f:d5:56:
8f:a0:bc:ad:40:09:8d:2b:21:16:24:b2:8e:ce:58:
30:4d:89:be:49:4d:76:ed:39:27:0e:81:6d:41:f9:
1b:69:7c:19:a3:9a:b0:b6:ed:ef:32:b2:c2:06:e7:
2d:c7:d3:39:f0:ec:70:19:7b:78:57:77:f9:84:2a:
70:ce:af:03:93:39:4f:02:89:67:90:5d:01:6a:a7:
ae:ee:ca:98:c6:21:48:c1:d0:bd:6c:97:24:c7:d2:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:CA:B5:26:29:BE:A6:1D:4A:C5:EC:3B:1D:0E:40:FC:A6:E5:3E
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:a2:9a:74:e8:cc:d4:4c:94:31:4a:bf:7d:71:3e:8d:c1:
bd:9e:9f:56:7a:2a:5c:68:0a:ee:64:47:9c:b8:30:b1:68:09:
a7:c6:9c:6a:9f:ac:53:8d:a1:23:9e:72:60:bb:b5:9e:64:ca:
59:0c:be:06:e2:f3:eb:b3:25:59:80:d4:ad:28:03:28:31:71:
d3:44:77:3d:5b:6a:6d:92:cd:00:b3:77:cf:a3:30:d9:2c:d7:
23:02:e1:e2:b4:3e:74:72:04:50:d4:47:62:25:93:fc:e8:78:
ff:c4:1a:60:26:3a:2a:70:8d:1d:75:5d:c1:d2:63:7f:bf:4f:
50:55:54:03:1f:57:61:57:5a:3b:93:c4:c8:35:95:51:24:5d:
3a:15:b3:89:2a:98:f0:ba:1a:73:73:dd:b9:76:cc:2a:e9:0f:
cb:e1:cc:1f:93:0e:cd:ec:2e:27:26:b3:5b:ec:7c:2f:d9:35:
ed:ee:ee:e1:b9:42:df:3d:af:bb:7c:b3:3d:df:2e:cf:09:3c:
ec:f9:02:17:80:3a:94:a2:aa:e2:bd:af:02:fa:70:69:94:ea:
c6:89:ef:a2:09:07:d6:76:c2:da:1d:36:67:54:0e:25:5f:2e:
9e:c6:8c:93:41:3a:59:b2:aa:3e:38:53:21:fe:9e:a0:64:a9:
99:f4:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:36 2025 by rpki-client