Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: 8lhSKc9OW3uY6bhE05j11NWOBJfxpYQ8fyYayum9Rjw=
Subject key identifier: 06:51:9A:FA:04:EC:D3:BA:05:48:A0:E7:78:EB:5A:0D:48:B8:C9:E0
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019795CC5C6722C23C207C2C30C3C6BA18EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1535
Signing time: Sun 22 Jun 2025 04:01:27 +0000
Manifest this update: Sun 22 Jun 2025 04:01:27 +0000
Manifest next update: Mon 23 Jun 2025 04:01:27 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: iM4wOhlbBaQCFoZ+dr3IAxN1+E0Fdovv/i7WjP0o0I0=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:cc:5c:67:22:c2:3c:20:7c:2c:30:c3:c6:ba:18:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jun 22 04:01:27 2025 GMT
Not After : Jun 23 04:01:27 2025 GMT
Subject: CN=06519afa04ecd3ba0548a0e778eb5a0d48b8c9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:af:2a:22:26:68:d0:e1:de:42:0e:62:46:
02:87:5f:8f:f8:0a:0f:25:63:f5:ab:e8:ff:44:6f:
29:e4:ce:46:6c:ce:13:a1:71:7a:f9:75:68:7f:73:
3d:cb:78:2d:f9:f7:6e:40:5f:84:7f:e8:27:34:c5:
a1:ca:5f:cb:eb:63:64:33:b0:0d:b1:c9:a5:ee:8b:
44:74:1f:fb:36:71:c0:f3:bf:06:1f:8e:b7:eb:eb:
6f:2c:14:48:84:87:7c:82:2b:5f:a7:7c:9c:c6:10:
fe:77:c4:5d:17:af:40:44:e5:1c:c5:5e:64:22:a8:
2e:58:b5:88:c4:c4:62:70:45:a2:77:3d:5f:03:0c:
38:ac:13:a7:10:2b:45:6d:a8:bc:23:87:26:a8:35:
e7:7d:ee:58:6a:80:cf:03:ba:79:e5:1b:68:0f:c8:
05:e6:29:11:57:15:8b:57:1f:12:57:db:bf:5e:65:
a4:67:3e:16:69:fc:07:2c:58:41:e4:b2:84:62:72:
e4:9b:64:69:d5:d6:d0:63:4e:46:17:a8:5c:ee:64:
a9:f2:6d:e1:9d:a9:bc:b9:0e:ba:f7:bf:be:db:4d:
29:d9:ea:48:d8:82:0d:a9:58:4d:91:ee:0c:12:2b:
0a:e6:00:28:81:86:37:b6:5f:e8:76:ac:3c:3e:b3:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:9A:FA:04:EC:D3:BA:05:48:A0:E7:78:EB:5A:0D:48:B8:C9:E0
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5d:aa:55:bc:52:33:f4:bf:d6:e0:3d:93:1c:41:71:03:26:
87:1e:e5:da:29:1e:8b:ea:fa:a5:42:65:bc:ad:33:bb:7c:4c:
49:85:81:37:82:05:bb:ed:82:24:1f:49:cb:7e:05:7c:23:99:
2e:25:a5:a3:5e:ac:c4:cb:67:d7:18:e9:f9:c3:b9:da:56:50:
10:ed:ee:5b:79:d7:e8:df:96:50:e9:c2:25:b9:09:b7:1d:05:
2d:7a:e3:06:41:69:c7:d4:78:65:91:86:ee:19:70:f9:0b:7b:
bd:b5:69:4b:f3:37:b5:f8:8c:46:ae:c0:c5:6a:75:85:75:39:
86:1f:87:e7:c5:5d:4f:a3:52:01:b4:93:14:9e:43:cb:c8:42:
98:db:07:69:8d:a8:44:1e:d1:14:9a:72:db:51:07:87:7e:6a:
3e:b1:4c:ea:ad:04:92:29:ef:57:96:b7:2d:06:27:e0:30:b2:
a9:b4:d4:60:25:58:dd:7f:2f:fb:9b:46:04:35:a8:e2:7f:8b:
e6:3b:85:ba:cb:9b:c1:9d:9c:f9:fc:89:58:73:57:fc:8a:0d:
ff:2b:88:da:7f:d3:93:10:da:27:d8:ec:bd:98:8e:d6:94:d1:
2f:31:b3:7f:6c:a9:9a:2d:6f:4d:20:0b:d4:aa:eb:0b:46:39:
18:3e:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:44:37 2025 by rpki-client