Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: +JmxeUjSHyC3PP3B75wwpNhIM98JTA8ukrzL21LsG6c=
Subject key identifier: 0D:3A:BA:89:E9:CF:D3:27:81:74:7B:79:AC:D7:83:16:D0:30:0F:AA
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019847ADE15628850A0A6A889A7BE9637B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 0687
Signing time: Sat 26 Jul 2025 17:00:34 +0000
Manifest this update: Sat 26 Jul 2025 17:00:34 +0000
Manifest next update: Sun 27 Jul 2025 17:00:34 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: zwxbnm781LFoMgCIwwKRZcLzvhWo63riPAop6olcNH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e1:56:28:85:0a:0a:6a:88:9a:7b:e9:63:7b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Jul 26 17:00:34 2025 GMT
Not After : Jul 27 17:00:34 2025 GMT
Subject: CN=0d3aba89e9cfd32781747b79acd78316d0300faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:9b:07:c0:3e:6f:45:52:cc:08:b4:f5:4d:
86:69:fa:f8:bb:e0:64:7e:21:77:ea:3f:7e:45:b2:
14:39:e6:0e:e6:54:cd:f0:5c:9d:3a:58:aa:0f:b8:
2b:1d:bc:4e:75:f1:aa:0b:7e:cb:07:7f:58:74:ff:
f6:cc:0e:31:93:c8:98:78:cf:5e:0e:7f:e2:ff:bd:
bd:5e:66:d7:fd:33:ac:bc:20:14:6d:27:4c:66:0d:
fc:9e:db:c5:02:83:69:b2:13:80:57:c6:c5:4c:55:
53:92:db:5a:fe:89:33:62:bd:95:d7:79:49:89:d2:
7e:b0:e4:20:3c:de:df:58:e0:d4:1f:b5:05:1c:8c:
4c:24:90:f9:0a:b8:1e:cd:b2:5c:4d:05:96:fe:2a:
83:5b:df:5c:f0:5c:68:8f:72:0f:2b:0c:a5:74:7e:
05:55:7a:dc:50:a7:89:98:bb:d2:12:f5:7e:0d:77:
16:33:25:1e:99:1b:c3:cb:a3:65:c7:c6:73:3f:5e:
0f:7b:59:74:c5:cb:82:ed:cb:d9:42:87:8f:a1:9f:
b7:1f:4b:c9:9f:e9:08:ef:62:a4:99:31:6f:7e:f7:
6f:52:48:52:ae:d0:31:8e:e7:94:b7:a2:87:b9:fd:
ce:3f:bd:b1:84:e3:c4:b5:92:e7:3b:33:fc:ad:10:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:BA:89:E9:CF:D3:27:81:74:7B:79:AC:D7:83:16:D0:30:0F:AA
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c7:8a:bc:cf:b6:f8:b0:a2:7e:af:49:29:6c:29:08:73:f3:
5e:3d:74:96:ae:81:69:80:f7:05:ad:3a:e8:e9:4f:8b:8f:7e:
ef:d9:31:b5:82:b2:f2:0c:ac:ea:23:21:3e:18:ba:30:8d:0c:
35:90:af:07:a2:8c:59:bf:7e:71:b1:2a:77:19:aa:67:16:b5:
eb:e9:28:29:75:ba:35:3b:17:03:85:78:8a:32:36:6c:18:06:
c1:75:d2:2a:72:53:6a:a4:73:47:dd:93:9a:28:1f:48:4c:df:
c1:d2:e3:8e:f5:ab:f7:5a:0a:a4:5e:51:ad:a2:aa:26:7a:c5:
23:f5:20:48:00:06:fe:b9:c8:f5:55:8b:16:ae:0f:15:7f:3b:
2f:83:09:d3:4b:d4:87:92:ba:5b:27:a4:c9:68:c8:0c:20:9c:
82:a1:cf:c5:cc:d0:e7:71:d8:49:8e:b8:0c:a3:cd:ce:4b:9c:
6b:ae:27:25:32:44:40:38:92:7d:5b:09:4b:4e:a9:35:c5:ac:
3a:a6:66:22:fa:0c:df:6d:c3:1d:03:62:c6:40:f2:70:0e:45:
40:ae:a6:f5:b0:22:36:e6:5d:48:fa:61:55:1c:14:69:59:f4:
4b:8a:b5:64:0f:dd:97:61:fb:23:c3:c1:af:b7:cc:f0:69:55:
92:60:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:55:45 2025 by rpki-client