Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: Dwe9eWiEnNjnebDVPE7G2Sm6R00Snh1gDfTkFH9pV0o=
Subject key identifier: 64:5A:65:38:40:00:C0:51:E4:DA:98:8F:7A:9C:70:44:16:41:88:52
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 01984A09BBA8ED10DFCFBDDC5CFB29F0610E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0B76
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: +bRNbXRafwXNFqIOqz3newUUjgMetfN78fllh6gR8Nk=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bb:a8:ed:10:df:cf:bd:dc:5c:fb:29:f0:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=645a65384000c051e4da988f7a9c704416418852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:78:7c:59:b3:b9:b9:60:ed:1e:43:99:a6:
93:3b:7f:5b:fd:ae:01:e1:37:82:3c:f7:ea:d1:97:
b4:47:38:c7:f3:05:7f:a0:bf:65:47:8b:e2:cd:a9:
25:1a:5c:35:82:de:fa:c4:09:b0:68:37:70:11:90:
00:5b:31:51:6a:1c:c2:8f:32:df:ce:03:41:a5:e3:
27:a5:6a:55:ed:48:b5:c3:be:1b:46:7f:1c:66:d3:
bf:80:3d:45:5d:99:ab:bd:ed:79:9e:98:cb:20:37:
ee:bc:64:74:b5:77:78:c5:31:db:90:a3:fa:6b:ab:
57:f3:51:dc:39:e1:8d:cd:58:26:6a:a6:3c:1b:ad:
37:1b:69:34:e6:0e:89:5c:36:8b:c9:63:24:28:9d:
7a:40:90:dc:55:29:42:70:62:66:86:44:9e:6a:47:
55:ee:73:a3:1b:fc:75:49:51:c5:68:88:44:10:b8:
be:f6:fc:a2:9d:bb:c6:57:08:6e:8f:af:76:d3:bf:
ff:3f:c7:4c:94:38:65:e1:d0:e2:ec:f4:c0:33:ab:
91:c5:75:3f:6e:b1:28:f6:9e:a6:67:01:35:b0:6b:
fd:92:67:55:77:c8:fa:dc:5b:90:ba:36:70:ed:d5:
0d:e2:31:d2:06:15:ad:94:25:3b:42:88:b2:48:ec:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:65:38:40:00:C0:51:E4:DA:98:8F:7A:9C:70:44:16:41:88:52
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:17:51:3a:1b:18:b2:f8:44:39:95:34:21:88:71:82:bd:
29:20:91:99:ff:c4:5c:71:d2:41:e1:c2:32:dc:a6:9b:c3:f4:
59:77:53:0b:a4:53:3d:db:65:25:49:d8:9e:e1:56:08:68:c1:
19:54:82:be:2a:8d:62:a3:e6:7a:b9:94:22:8a:2c:93:70:d2:
01:1f:38:49:27:0a:a8:ab:03:6a:d6:cd:85:03:1f:28:0e:cf:
51:cc:e8:aa:cb:55:cf:67:05:f2:a1:11:e6:48:ea:e1:6b:15:
c3:26:49:5e:90:b6:83:b0:04:44:3e:ac:fe:17:a5:af:33:2b:
c8:43:0e:a0:d4:f5:5b:7c:35:d8:92:90:7b:44:a6:69:1c:fc:
a0:1d:79:a1:71:7d:0c:7d:fe:28:94:c6:63:b5:05:63:dc:55:
93:13:fb:50:89:20:a8:c3:c9:21:e1:54:b7:27:53:c8:62:20:
30:50:cf:9a:7b:37:d8:54:cf:59:d6:0f:0d:aa:53:b0:3a:94:
9d:11:97:df:2c:0f:8a:dd:ee:c9:17:3d:cd:ea:30:14:56:35:
76:b7:ff:f1:34:08:f3:55:a8:a5:28:34:42:a2:98:e9:df:a0:
6d:aa:9e:a5:d2:5c:b8:1e:d3:0c:70:7d:2b:6e:31:1d:0f:62:
ab:8f:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:09 2025 by rpki-client