Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: 5LzxhYuVWqcM11/i/lTZyb44D7oKPPpyU4RQdbr6y+A=
Subject key identifier: 18:D7:77:F3:BD:94:A5:9B:50:69:9C:83:E0:4D:7C:E6:6F:A8:12:52
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01984B534556F8B77CB718B42109AACD6D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 10:00:05 +0000
Manifest this update: Sun 27 Jul 2025 10:00:05 +0000
Manifest next update: Mon 28 Jul 2025 10:00:05 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: onxj/7wNHd0Tos6bXvEhT4p3HUJyFfqBbuXNKYgD1mM=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:45:56:f8:b7:7c:b7:18:b4:21:09:aa:cd:6d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jul 27 10:00:05 2025 GMT
Not After : Jul 28 10:00:05 2025 GMT
Subject: CN=18d777f3bd94a59b50699c83e04d7ce66fa81252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:08:66:f3:c6:36:b4:c0:a6:99:10:2b:85:
2c:8a:ba:9b:bb:be:79:42:36:ac:84:15:dd:aa:cc:
ae:33:6d:06:d6:af:3c:f7:61:e7:d6:f4:a2:d9:f0:
0c:38:5e:98:83:9d:e3:00:4b:80:c5:ed:e3:eb:cc:
53:2e:6f:18:34:17:6f:02:2d:c1:6e:23:16:6a:f0:
8b:56:85:0d:f4:f0:73:b7:05:fe:6d:15:09:40:5f:
72:08:3f:f3:49:30:fc:23:d8:8b:12:21:97:5b:5f:
ea:25:3d:a9:6e:37:20:e2:47:02:79:5f:a3:7c:54:
f4:7b:5a:9a:6d:af:c6:9c:e8:06:b2:a3:e6:d7:bf:
54:0e:77:d9:1e:d9:6f:06:fb:4d:a8:9c:e3:0b:31:
00:8c:d2:23:5c:5b:9f:de:bf:c3:8f:1d:46:91:fc:
cb:ce:a4:cf:5c:e7:8e:ef:84:9d:4f:71:8a:2c:17:
1c:ac:43:47:3f:25:55:d0:2b:77:da:19:18:17:5b:
00:f5:1b:3a:20:f6:9a:11:e5:75:4b:06:a5:a0:46:
e0:23:7a:ff:bd:bd:f5:41:ce:8c:0f:6a:a6:2a:82:
9f:29:27:b2:3d:54:c4:52:d8:39:50:3d:3d:f9:0e:
07:ce:ca:af:b9:b5:fd:4e:32:e8:8b:0a:03:fb:f5:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:77:F3:BD:94:A5:9B:50:69:9C:83:E0:4D:7C:E6:6F:A8:12:52
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:54:f3:a0:66:c3:10:c2:bf:ca:ce:40:5b:f2:39:d3:24:
0b:58:28:bf:b8:9b:20:41:f3:05:b1:71:17:e2:4e:9c:12:b1:
3c:3f:99:47:6c:69:68:40:84:9e:b9:9a:91:1f:35:ae:3a:ec:
78:b7:d9:8b:4d:59:53:9d:74:fe:71:45:fa:3d:ed:af:cc:dd:
76:27:37:07:07:c3:4e:57:2b:67:3d:7e:3b:79:d6:7c:8e:53:
62:54:32:eb:69:7c:94:47:f8:5d:43:48:55:0d:63:7b:18:ad:
d1:6f:7a:da:de:cb:f5:87:21:78:75:3d:1e:b7:21:8f:7e:e9:
68:00:db:74:70:24:19:96:e6:fb:62:b5:36:d6:13:93:eb:ec:
84:4f:ef:b6:f4:c2:52:29:39:5f:39:d9:17:0f:77:10:c7:34:
d9:76:ab:b2:61:dd:c7:63:f2:e7:b9:7e:91:55:8e:25:80:3a:
6a:f2:3d:3a:77:ee:61:98:20:5f:79:93:c8:80:12:0d:09:6f:
f6:68:07:f4:04:11:c4:02:60:4a:9b:5a:12:95:c1:b8:dd:7f:
c8:ce:21:42:8f:37:77:e3:37:5a:39:7f:53:2d:12:95:9a:c7:
44:90:26:c5:e1:4f:10:ab:69:9a:20:c8:d8:d4:c6:a5:79:09:
69:7f:a3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU0VW+Ld8txi0IQmqzW2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz
NTcyOTMwHhcNMjUwNzI3MTAwMDA1WhcNMjUwNzI4MTAwMDA1WjAzMTEwLwYDVQQD
EygxOGQ3NzdmM2JkOTRhNTliNTA2OTljODNlMDRkN2NlNjZmYTgxMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHsIZvPGNrTAppkQK4Usirqbu755
QjashBXdqsyuM20G1q8892Hn1vSi2fAMOF6Yg53jAEuAxe3j68xTLm8YNBdvAi3B
biMWavCLVoUN9PBztwX+bRUJQF9yCD/zSTD8I9iLEiGXW1/qJT2pbjcg4kcCeV+j
fFT0e1qaba/GnOgGsqPm179UDnfZHtlvBvtNqJzjCzEAjNIjXFuf3r/Djx1GkfzL
zqTPXOeO74SdT3GKLBccrENHPyVV0Ct32hkYF1sA9Rs6IPaaEeV1SwaloEbgI3r/
vb31Qc6MD2qmKoKfKSeyPVTEUtg5UD09+Q4HzsqvubX9TjLoiwoD+/XjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjXd/O9lKWbUGmcg+BNfOZvqBJSMB8GA1UdIwQY
MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt
MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2
LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3dU86Bm
wxDCv8rOQFvyOdMkC1gov7ibIEHzBbFxF+JOnBKxPD+ZR2xpaECEnrmakR81rjrs
eLfZi01ZU510/nFF+j3tr8zddic3BwfDTlcrZz1+O3nWfI5TYlQy62l8lEf4XUNI
VQ1jexit0W962t7L9YcheHU9Hrchj37paADbdHAkGZbm+2K1NtYTk+vshE/vtvTC
Uik5XznZFw93EMc02XarsmHdx2Py57l+kVWOJYA6avI9OnfuYZggX3mTyIASDQlv
9mgH9AQRxAJgSptaEpXBuN1/yM4hQo83d+M3Wjl/Uy0SlZrHRJAmxeFPEKtpmiDI
2NTGpXkJaX+j6Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:06:10 2025 by rpki-client