Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: 940XIfR/tx9vMHo+bgFXQzkY9LPUdhVYOnx3lDcy83E=
Subject key identifier: 6B:53:38:74:81:22:EA:AF:29:30:1B:61:35:D5:29:AA:37:CB:06:37
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01984AE5863534E8E45952BABEAB6975D33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1144
Signing time: Sun 27 Jul 2025 08:00:12 +0000
Manifest this update: Sun 27 Jul 2025 08:00:12 +0000
Manifest next update: Mon 28 Jul 2025 08:00:12 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: XbsRclqKQGcI4jZXquhxykbBUfPOrqpWxIAWLWMPHZ0=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:86:35:34:e8:e4:59:52:ba:be:ab:69:75:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Jul 27 08:00:12 2025 GMT
Not After : Jul 28 08:00:12 2025 GMT
Subject: CN=6b5338748122eaaf29301b6135d529aa37cb0637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:62:16:51:a4:54:ba:0b:5c:c9:39:94:42:
eb:e4:59:79:7d:d1:d8:b8:a1:6a:92:b5:9a:a7:9a:
73:90:40:62:f9:6d:b0:02:d1:a8:c1:ce:90:ef:55:
64:bb:9b:87:af:f1:5e:99:19:45:74:c8:f9:38:0f:
58:56:b1:18:98:9c:13:bf:e6:08:56:05:f3:15:84:
1c:24:00:a4:ee:1f:0a:6a:95:9e:ed:aa:37:c7:e3:
bc:27:4b:37:c3:36:aa:7a:18:68:b0:6e:3c:15:a6:
2e:d2:b9:56:4f:ac:99:32:0b:4c:59:91:f5:52:27:
8b:81:a0:57:bf:d9:c3:3d:d0:31:26:04:90:89:99:
d5:0e:62:c0:a6:96:c7:76:57:88:ca:fa:19:05:4a:
fc:6e:41:ef:7a:74:90:1f:83:5a:d1:64:01:c7:45:
88:13:53:0c:23:16:ab:6e:ff:d4:09:5b:7e:ad:cf:
6d:23:74:85:7b:ec:d1:72:62:05:19:c0:e8:0a:31:
6d:ec:45:6c:c2:13:93:3a:72:87:b2:b0:96:2e:ab:
34:63:dc:15:2f:93:ff:cf:dc:f0:dd:e1:21:76:9d:
f1:d3:6e:bc:86:3c:6e:7e:0b:74:fe:9d:a5:aa:e8:
fb:82:34:d1:64:87:ac:89:30:e0:81:04:44:66:a2:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:38:74:81:22:EA:AF:29:30:1B:61:35:D5:29:AA:37:CB:06:37
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:67:84:52:66:13:e1:5d:71:ae:d9:6b:e5:a2:7d:ff:b3:
da:48:9f:97:d2:e2:b9:1b:79:65:77:c3:9a:95:97:43:12:60:
c6:c0:3f:5e:78:78:39:62:95:0b:67:7e:89:43:b0:0f:3c:2e:
f4:cb:05:13:52:f7:63:d1:d5:0f:28:d0:be:6b:fb:ce:62:2b:
0b:38:67:58:16:2d:1c:ea:9b:27:32:42:56:a3:da:76:dc:34:
97:b5:9e:f4:43:f5:e9:00:cb:02:7f:69:e7:67:cb:96:1a:fa:
24:30:46:99:cb:cf:52:af:13:d1:bf:93:3e:41:b8:dc:57:f6:
65:c5:c7:90:ec:fd:81:47:4a:b7:cf:99:94:a1:a3:cf:c4:05:
56:3c:89:84:ce:59:ee:6d:82:dd:33:56:f7:fb:38:4e:6b:52:
f9:90:f7:93:7f:fb:5d:7f:f2:bf:22:a5:25:b3:52:65:51:bc:
49:e3:54:20:c6:e4:2b:a2:6d:07:ca:4a:e9:cd:be:5d:51:a6:
82:85:57:a4:72:f3:0d:e0:d8:5f:f3:11:7e:43:40:66:84:d7:
78:95:10:25:87:63:92:fb:61:64:e5:a0:57:6c:23:20:89:4b:
52:f0:89:ff:1e:2f:93:43:79:ec:5b:38:b1:2f:ec:00:42:22:
a8:bb:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:16:28 2025 by rpki-client