Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: rg1UvZs8yaI2xP+/G7truiFrFBQbADwu5c0CZpu+3M0=
Subject key identifier: B3:88:08:32:13:F0:F2:91:CA:DB:6E:AF:FA:9D:2B:74:80:A6:BC:86
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 0198469AF488CAA919F66DC3A672D61CC73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 04EB
Signing time: Sat 26 Jul 2025 12:00:16 +0000
Manifest this update: Sat 26 Jul 2025 12:00:16 +0000
Manifest next update: Sun 27 Jul 2025 12:00:16 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: 4+wUI173CdRUMOKFZBLyIHqGEsI3Yd8Onuho9cGLltw=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:f4:88:ca:a9:19:f6:6d:c3:a6:72:d6:1c:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Jul 26 12:00:16 2025 GMT
Not After : Jul 27 12:00:16 2025 GMT
Subject: CN=b388083213f0f291cadb6eaffa9d2b7480a6bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:66:67:43:f1:02:c6:11:e5:3f:4c:98:20:
8a:56:9d:64:25:d8:66:75:b7:6c:2a:d8:cc:33:21:
0d:0a:f4:df:c1:fb:20:b1:bf:01:ea:a5:c0:a9:a5:
df:33:57:2d:4e:67:08:a4:6b:da:8f:7b:52:dc:8d:
bd:cf:5e:a8:db:63:84:6d:12:bc:bc:8a:1b:7c:d4:
29:e4:25:13:f3:fd:31:d2:c7:b8:35:6e:2c:06:0e:
4c:bc:f6:40:8b:d2:a9:c1:d7:42:35:16:49:a2:36:
b2:2b:4d:24:ef:d1:cb:5d:b3:9a:76:a2:05:c7:44:
28:4d:b6:a0:56:3d:ff:16:f9:bf:fa:46:19:45:d0:
30:5f:4e:6c:9d:95:0c:78:55:c9:2a:51:4f:1b:ab:
d6:6e:14:51:37:f4:14:c7:b3:cd:24:a1:40:50:0f:
73:bc:84:16:c6:06:ec:c1:3d:de:6a:03:c7:22:36:
5f:31:4c:f4:f7:20:bd:70:5c:cb:3c:24:07:2d:c1:
6e:20:22:9a:04:75:e9:75:b2:40:14:c7:1c:08:50:
f5:9b:68:09:c4:05:8b:72:94:58:9c:a5:55:16:b5:
7c:fd:6d:64:4f:06:e7:79:da:37:e0:7b:b2:90:b8:
78:80:08:16:64:78:3c:e5:a6:4a:82:84:cb:f1:b0:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:08:32:13:F0:F2:91:CA:DB:6E:AF:FA:9D:2B:74:80:A6:BC:86
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:38:a6:92:8d:f4:65:80:5f:3e:76:2a:f0:98:94:6a:25:6a:
1c:cb:dd:ee:e4:af:07:df:ab:19:0e:a1:07:d3:0c:72:3a:30:
2e:c4:d4:c5:d5:64:72:09:16:f4:93:28:17:c0:fe:c5:5d:bf:
a7:a0:1b:a0:08:3a:ee:38:2f:cf:1f:c6:6e:f7:c4:df:8b:a9:
e7:60:10:64:95:e2:01:0a:a2:48:f9:72:67:71:f7:2c:73:a2:
9e:b7:35:47:e3:73:86:32:d5:5a:a6:94:ac:8d:e9:59:9c:ef:
ab:11:5e:f0:ab:92:e3:8f:e2:91:c1:ad:ac:d7:8f:56:12:69:
75:33:1a:ed:0c:e1:25:62:c7:fa:1e:57:e1:aa:1e:0d:9e:17:
f6:c9:be:82:e2:5a:28:1f:35:a4:d3:6c:5d:6d:81:97:07:e6:
ea:91:d0:77:45:c7:6a:7b:67:f0:6c:be:f4:07:e8:93:49:1e:
cb:26:12:3b:fb:60:bc:b1:21:b4:56:1b:cf:2f:fb:65:ff:42:
1e:22:b0:35:0f:47:68:cb:af:c0:0f:5f:4e:d2:70:2c:35:3a:
e0:77:38:e0:10:db:98:a9:72:4e:19:b1:6b:1d:3d:7e:04:20:
48:7d:01:d5:2b:79:24:93:a2:b7:59:c6:3a:60:80:e3:12:83:
29:48:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:51 2025 by rpki-client