Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: GhM9cANmxPot76GDLRbNZ2BYTnyOubYoN6LnR64hLUg=
Subject key identifier: B7:0D:58:18:C4:4B:4D:41:0C:53:8E:2E:86:92:CA:51:97:3F:E7:B8
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019849650E2453ED2995223A7EE23BE1A17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 1552
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: Nh3OfvRybEgaPn0oeKZCbYz1kK6KZFO8FVnokhK8j40=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0e:24:53:ed:29:95:22:3a:7e:e2:3b:e1:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=b70d5818c44b4d410c538e2e8692ca51973fe7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:37:3e:02:ef:0d:6b:fc:a0:1e:63:5d:70:
8d:3e:09:e4:b9:8b:1e:c5:ce:ba:c1:b6:69:1b:d9:
cb:e9:7a:76:d9:57:c5:22:0e:c5:58:06:b0:16:c1:
7a:0b:d6:cd:e3:a7:98:f3:d3:84:6c:96:9c:ae:42:
48:3f:42:a5:ce:be:3b:fc:db:7a:68:48:98:db:6b:
75:60:69:fc:f7:51:2a:cd:65:f7:38:b8:50:d0:30:
3f:36:a2:76:b8:9d:70:5d:4d:12:aa:41:0c:73:7b:
ab:3c:6d:c4:9a:fc:fb:e4:eb:d7:1c:8c:ba:2f:00:
16:ed:af:b7:c0:61:a7:f2:3b:ee:33:50:04:2e:b1:
a0:72:0c:65:ce:f8:38:de:56:f9:d8:52:fb:ca:07:
5b:7b:e8:99:f3:fc:52:47:04:c1:02:11:35:d5:6d:
ee:bf:30:ca:b4:51:19:c2:b2:2e:bc:5e:a2:48:c6:
5a:dd:20:fb:70:56:78:d7:8d:48:fe:ec:a3:41:2c:
28:1a:0e:2b:70:73:62:26:cc:4c:d4:cc:4d:6a:dc:
0e:66:b7:0c:21:8a:02:55:0f:61:6b:3e:0c:86:d7:
af:8a:b7:82:ef:61:02:8f:5a:c2:aa:1c:a6:b2:59:
dc:19:11:dc:f5:0c:35:14:23:ef:58:c2:77:cf:76:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:58:18:C4:4B:4D:41:0C:53:8E:2E:86:92:CA:51:97:3F:E7:B8
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:f6:40:c5:b0:b4:f2:6d:f8:d8:c8:04:2f:32:f9:b7:9a:
60:4d:a0:e4:40:79:cd:26:75:ea:0a:b8:0f:95:47:af:16:81:
12:8e:d8:53:9d:32:f6:da:16:be:60:c7:0d:5a:4a:bd:30:25:
8a:2c:5a:a5:a5:12:7c:e1:c3:5a:cf:75:cb:10:dd:c7:87:e0:
13:08:13:8f:29:89:e3:de:68:72:3c:09:3b:5c:8c:54:08:58:
3d:aa:f0:8f:a0:a5:4a:3d:da:f6:a0:8f:c4:77:e6:25:79:65:
44:b2:46:08:36:84:92:01:fc:f8:e3:08:b8:bf:42:3c:d2:d7:
80:73:76:5e:00:79:2a:11:ff:49:a6:cc:36:04:dd:8e:5c:da:
34:05:69:7c:64:db:1f:7b:34:3b:c9:25:9b:56:48:02:cd:90:
ef:22:82:13:d1:eb:15:49:bf:e4:db:b2:6b:d6:b8:d1:1b:19:
00:f8:3a:08:70:09:73:76:7f:7d:73:ae:72:7d:95:ec:cc:87:
6f:2a:63:be:2a:fd:bc:c8:47:66:b3:98:8d:41:28:52:9b:32:
bb:c0:b6:f5:3d:d7:71:12:96:b8:71:0c:4a:32:94:5e:3f:c8:
03:e1:6b:67:39:55:5a:ab:38:20:1d:ed:d4:c2:41:f3:35:e2:
ce:fc:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:46 2025 by rpki-client