Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: Fjxoj0j9gyvhiEDK5QMd+4srAkinYg+odAai0hqoN64=
Subject key identifier: 2B:B2:86:BD:78:21:2C:9F:D7:74:9E:6F:3F:8E:1D:4A:AC:33:7B:3C
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 01984B53A5D87D77FB940D0C4642BBDF74BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:29 +0000
Manifest this update: Sun 27 Jul 2025 10:00:29 +0000
Manifest next update: Mon 28 Jul 2025 10:00:29 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: HSf+EUnadAzvu1N3XP4MUsisfofC1c9vUSzeA4xeVoA=)
2: ZyIu060SPaMWxMQNL4CIeyP46Zk.roa (hash: GVU/SWZQhKij7yAFfd4z7w9wi6LHgd9IcJaXLlSPbVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:a5:d8:7d:77:fb:94:0d:0c:46:42:bb:df:74:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Jul 27 10:00:29 2025 GMT
Not After : Jul 28 10:00:29 2025 GMT
Subject: CN=2bb286bd78212c9fd7749e6f3f8e1d4aac337b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:4a:c9:85:90:cc:db:07:b5:ab:50:e5:6b:
f2:50:bc:51:70:1f:b4:76:5f:e6:fe:49:be:61:7f:
5a:9a:03:24:9b:f5:d8:04:96:82:b0:a2:48:1e:1f:
0f:54:1a:f6:45:f2:9a:ec:f8:7f:00:f5:2b:d9:d5:
0d:8b:34:d7:e7:17:f7:8a:98:b6:97:dc:07:4f:4d:
1f:82:4e:3f:21:3d:4e:87:c8:b4:24:6d:80:e3:12:
9f:a5:38:0e:ce:af:33:38:7c:05:89:5c:b6:6b:35:
c1:c3:d8:84:cf:b7:31:c6:61:2d:b1:09:6c:6c:a1:
02:20:0a:b0:be:68:aa:8f:f5:8d:8a:14:47:81:66:
f7:11:56:d4:af:56:99:b1:5a:4d:b7:9d:74:9d:b8:
18:17:0c:4e:98:32:49:c5:fb:4f:5b:cd:3d:0e:8b:
25:23:fa:bb:0a:5d:9d:31:c4:09:5e:a1:0e:26:68:
1c:2b:5f:bd:43:1e:05:5a:ab:9c:0e:5e:d3:1e:ae:
6d:c6:2c:79:e7:f4:e5:e2:cb:a3:50:51:03:ff:3e:
8b:64:6c:63:b9:75:1c:6e:11:50:f8:56:31:00:93:
5f:c2:d5:bc:75:06:d0:38:31:0b:4f:ea:ae:5e:1b:
73:fe:b7:7d:ce:dc:2a:30:d0:d1:38:0c:23:aa:35:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:86:BD:78:21:2C:9F:D7:74:9E:6F:3F:8E:1D:4A:AC:33:7B:3C
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:8d:56:69:54:bc:28:e3:63:32:a8:76:b3:ae:fe:09:74:
d5:30:9f:9e:4d:03:e5:e2:6c:22:dd:cd:f3:84:6f:05:6c:cd:
c0:fc:29:3a:bb:a4:c9:ac:c0:fa:cf:5b:45:d4:0c:98:a7:f3:
17:4f:97:b1:0b:88:db:53:33:25:55:47:6e:ed:80:6a:50:f2:
5c:6d:5c:ce:00:52:f5:03:c2:7d:40:5b:a2:fe:a0:67:61:1c:
be:68:99:ec:ad:16:0f:93:6f:e9:6e:c1:32:c7:95:6d:da:f6:
18:5c:2d:6b:75:9d:51:dd:eb:6c:9a:dc:13:6b:2e:9a:5d:aa:
d6:3d:de:a4:20:9e:cc:a6:d9:0b:82:9b:1e:a8:90:ac:73:24:
04:90:62:e6:2a:8b:b6:5e:61:76:70:df:27:df:78:a1:26:de:
5f:59:73:9d:ef:2a:4e:9e:00:21:bf:51:4f:d4:c1:89:83:6c:
59:09:87:4d:2c:28:21:48:f3:9c:23:6a:a8:ae:48:84:72:f0:
2e:f3:70:38:d4:29:78:17:1d:d3:ca:07:8a:71:b4:83:5f:41:
d7:57:29:b3:e8:63:d5:80:50:04:01:5c:b1:b5:48:03:e2:7c:
79:93:4b:5a:a1:db:6e:74:c5:1d:f5:f6:66:e4:20:ec:ea:cd:
83:1a:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:25 2025 by rpki-client