Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: NTT8QxzvkCx2RO/FrbG9IquXo7hNFp0RL+sNoWZW9WM=
Subject key identifier: 3A:57:22:BE:CF:C0:3E:40:45:C0:8F:74:19:31:9C:2F:C1:35:7B:DE
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01977C427BDF652C78BE242E0A9220F8D751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 10D9
Signing time: Tue 17 Jun 2025 05:00:20 +0000
Manifest this update: Tue 17 Jun 2025 05:00:20 +0000
Manifest next update: Wed 18 Jun 2025 05:00:20 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: NTzIc4SoSSvbSvxp94/aFd2hF4bsu14CLKENU4lxh2g=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:7b:df:65:2c:78:be:24:2e:0a:92:20:f8:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Jun 17 05:00:20 2025 GMT
Not After : Jun 18 05:00:20 2025 GMT
Subject: CN=3a5722becfc03e4045c08f7419319c2fc1357bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:ce:fd:78:e2:88:58:8c:52:6d:86:36:2e:
79:7b:76:8e:8b:ad:19:0a:c1:31:70:29:b5:d2:00:
f1:9c:3d:cd:2c:2b:1d:cf:87:1f:41:9f:ae:59:54:
f4:2a:3d:9e:90:d9:ec:e9:5e:36:36:aa:7a:79:b2:
8f:e5:73:c2:64:3f:2d:c9:20:8f:44:90:05:8f:e9:
1c:5b:5e:9b:a8:b1:99:04:0c:bd:d0:ef:f6:a7:20:
69:bb:73:ec:7f:9e:8a:1b:4c:05:fb:68:57:d9:d2:
0c:49:82:ea:47:19:17:7a:5c:61:37:5b:46:31:18:
15:5f:a3:73:37:14:31:b2:a9:ec:19:68:b5:60:b0:
36:b7:c6:d1:75:fc:a4:1d:1a:5d:9f:28:0e:13:5a:
7d:20:ac:41:9d:7f:81:61:79:9a:20:dc:cc:85:2f:
be:98:61:eb:26:92:f0:96:ee:17:61:78:9f:d5:85:
24:d9:b1:2d:bf:11:9e:fd:8a:55:c9:ac:9f:00:1d:
e1:ff:5c:da:8c:e7:ce:1c:84:90:5d:d4:a5:07:d4:
09:b3:26:94:75:bd:65:c5:96:7e:e3:85:79:fe:67:
49:c3:3f:47:43:21:29:a5:8e:e9:85:c2:14:95:25:
fb:fd:9a:37:ca:c0:f3:fe:81:c5:74:b8:68:f2:ce:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:22:BE:CF:C0:3E:40:45:C0:8F:74:19:31:9C:2F:C1:35:7B:DE
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:78:02:cb:92:17:8a:fe:23:09:10:d0:64:1d:23:a7:f7:5f:
dc:2d:a0:73:8d:a6:86:54:b0:98:dd:a1:03:b8:4b:41:90:42:
3a:df:ff:59:ec:fd:3f:46:c5:d1:e6:bd:5d:9e:22:27:b9:a4:
0d:cd:cf:b9:d0:c4:e8:d6:0b:14:59:f4:c7:3d:73:16:74:e8:
4d:00:dc:5a:90:62:a5:c8:7d:a1:ef:bc:a1:a9:6b:4f:72:93:
53:dd:cb:5a:ce:19:9f:64:38:24:e0:81:93:0a:d4:7d:5a:5b:
5c:70:6c:02:5d:9e:55:1a:fb:9e:70:ce:00:5f:c6:8a:af:42:
e9:22:78:9b:fd:f6:4e:b9:bd:d6:dd:9e:90:74:f0:75:85:90:
18:c6:03:26:fd:b3:8e:2b:44:cd:d8:4f:9e:4a:28:e9:6b:80:
a9:a5:80:3c:5a:11:e7:c4:73:28:c8:1e:78:d4:11:d3:b4:d5:
96:7d:20:26:3b:33:21:a5:59:74:30:b8:9c:19:d5:65:f8:54:
8c:a6:5c:fd:88:8a:77:20:88:55:7b:3a:e4:7b:8d:b4:6e:8b:
4a:5b:53:cc:9d:03:1f:ef:83:c8:40:15:d9:a6:06:ad:7c:93:
ed:e6:8b:7f:c6:08:a8:ba:fe:bf:13:7a:10:0e:17:32:77:45:
f3:ca:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:06:47 2025 by rpki-client