Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: lyO2A7ixhNUY7Ls4/TT0A2D+6nn/Dt7MlQj7p1AgweU=
Subject key identifier: EB:A5:8B:51:12:9C:35:43:AA:67:97:94:00:66:4B:14:53:92:AF:9F
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 019843D0F12C9A6CBC60EC9192CC89EF4703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 0F3F
Signing time: Fri 25 Jul 2025 23:00:23 +0000
Manifest this update: Fri 25 Jul 2025 23:00:23 +0000
Manifest next update: Sat 26 Jul 2025 23:00:23 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: QCAmkDhatocy5KglTrS+YBxBk8MCXqopYG5GD54rbz4=)
2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:f1:2c:9a:6c:bc:60:ec:91:92:cc:89:ef:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Jul 25 23:00:23 2025 GMT
Not After : Jul 26 23:00:23 2025 GMT
Subject: CN=eba58b51129c3543aa67979400664b145392af9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:74:f8:6d:4d:cb:c8:6f:a0:fd:55:6c:09:
3a:17:7d:50:e4:7a:7d:ae:b3:32:7f:65:b0:b7:bf:
a6:64:8a:16:b8:8c:1a:76:f2:40:5c:dd:62:06:69:
18:f3:1c:f0:0e:1e:b8:c7:2d:40:e7:27:10:6f:d9:
a8:0b:6c:a4:9e:b0:23:ed:56:f9:73:c4:62:7b:2e:
8c:e3:1f:6a:b0:46:21:a6:ef:56:c0:59:0e:14:90:
d4:3f:59:8c:96:cb:4f:b0:b5:3a:c3:0b:e6:4c:62:
86:35:08:96:89:bb:d3:ac:24:7d:cd:87:14:84:a6:
eb:5d:a0:01:0e:0a:3f:00:36:a2:7f:90:33:3e:74:
e0:5f:48:81:ca:e4:37:be:0b:51:88:37:cb:9e:ff:
c5:74:79:bd:c7:2b:07:ef:f4:c8:f6:f9:db:4b:74:
69:6e:2c:2e:35:e6:53:c4:f8:c8:04:fe:59:84:01:
40:4d:12:b0:7f:76:b5:26:2f:76:eb:5a:6b:4f:c2:
12:a0:d5:b1:94:88:65:16:c7:e9:e9:80:f7:87:c3:
66:62:50:48:ad:39:39:b4:2f:a7:65:74:fe:69:bb:
7d:57:9e:5c:93:05:c8:bc:e6:97:98:c0:2e:44:cd:
3e:d2:21:91:ed:43:6e:7b:bb:d5:81:c3:af:13:1b:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A5:8B:51:12:9C:35:43:AA:67:97:94:00:66:4B:14:53:92:AF:9F
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:33:dc:cb:0c:9f:a8:e3:0a:cf:7e:85:f9:9a:45:53:8f:38:
38:e1:db:c0:43:15:2c:cb:e3:70:cd:e9:46:31:ed:0d:11:a3:
d6:f7:88:b7:de:0b:0a:8f:a9:a1:6d:6a:9a:2c:6d:5d:60:a0:
e4:2e:41:ca:61:a3:a2:28:22:2c:6c:b6:02:3e:bf:f5:00:18:
4f:aa:fa:30:20:99:65:e5:62:5a:4d:18:72:48:f3:b2:73:d5:
68:9e:47:e8:95:39:50:fd:ba:ab:fc:0c:57:3c:7f:01:00:a4:
78:4d:eb:06:18:58:19:ff:7b:58:18:6a:f0:38:e7:97:b6:a7:
aa:38:e6:ea:a0:18:9f:7d:17:83:13:e9:56:0e:39:4b:37:22:
ad:48:e2:11:71:bb:c5:ac:58:0a:20:54:b0:e7:c4:99:c6:7a:
d4:f9:f3:9d:39:42:c7:98:56:b6:b4:f0:3b:a0:d8:d3:77:e4:
f4:6d:77:f1:cf:fb:97:62:eb:2d:73:a5:0e:50:d7:c5:44:ed:
d6:8a:d4:4a:62:3c:73:0e:b7:6a:17:98:7c:04:d0:44:db:2e:
24:9c:e6:f2:0d:79:6c:b7:d0:17:50:d8:ef:60:31:ea:c8:62:
b2:f2:31:a2:39:3d:51:71:37:50:d0:af:07:25:2c:f9:c2:24:
c5:f8:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:39:44 2025 by rpki-client