Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: sUZfYMxh3gyS67B4+WXuO+32KIrhfcLvzd3lZnMG4gQ=
Subject key identifier: EE:09:B5:0C:97:E7:B5:A0:CC:8F:4C:C1:0B:7E:B3:9F:4B:C0:40:40
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 01974EC55665ADF2165440FD7448BFA2B48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 0F7A
Signing time: Sun 08 Jun 2025 09:00:44 +0000
Manifest this update: Sun 08 Jun 2025 09:00:44 +0000
Manifest next update: Mon 09 Jun 2025 09:00:44 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: PFGxXwjiPNRQ83OzGvLQXkIRaZ098AvTPjqQwKcopfw=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:56:65:ad:f2:16:54:40:fd:74:48:bf:a2:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jun 8 09:00:44 2025 GMT
Not After : Jun 9 09:00:44 2025 GMT
Subject: CN=ee09b50c97e7b5a0cc8f4cc10b7eb39f4bc04040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:5c:4f:d6:a0:b4:79:d5:11:38:10:ce:7e:
9b:07:aa:3e:36:33:19:09:ed:e0:0e:ce:44:c6:28:
03:47:e0:fa:b7:53:83:8b:ab:f7:f5:58:bb:6a:e4:
d0:cf:d8:96:d3:73:e1:99:e1:9c:3e:35:8f:72:0e:
49:2d:15:60:c4:a9:9f:a6:95:e7:96:11:27:d1:3f:
1f:d1:57:09:cc:e9:2b:b0:8c:69:27:c2:91:e6:d8:
e6:ca:ac:6b:2d:33:d4:ca:0a:de:b3:cb:ed:1d:93:
ee:bd:69:01:7b:c4:0c:20:7c:97:8a:36:03:74:81:
f6:c6:69:d6:a9:d3:23:cf:9b:2d:36:3c:29:d1:8b:
18:4a:1d:80:ae:2a:f6:42:12:a0:78:1d:28:75:93:
7f:e8:59:aa:bd:42:7d:71:45:5a:29:0d:dd:3e:c3:
1e:e1:d0:ec:29:cc:b2:fb:60:7a:c1:e6:00:31:7e:
94:fa:a9:cb:88:7b:85:67:77:5c:58:87:4c:66:5d:
ba:24:a4:b2:41:82:6a:0b:8d:ba:ee:b4:2b:4a:1b:
bb:f0:59:06:0d:25:20:bc:bc:f4:4c:6f:bc:30:bd:
1b:71:03:2b:6c:d3:97:18:30:e3:44:d3:df:ed:cb:
3b:87:43:d4:d1:0b:d3:cf:f1:fb:25:bb:5e:c8:bc:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:09:B5:0C:97:E7:B5:A0:CC:8F:4C:C1:0B:7E:B3:9F:4B:C0:40:40
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:bc:c7:a6:13:08:6d:64:eb:c1:f8:b2:0d:28:96:f9:24:
f2:98:ea:cc:f5:68:14:61:00:43:fb:6d:81:7a:2a:0e:5c:5c:
27:ce:0b:01:ce:28:56:57:47:26:40:09:73:ba:83:47:6d:cf:
30:75:72:e3:aa:1b:46:36:1b:cf:54:7d:87:d1:18:af:b6:88:
92:61:32:43:60:29:b5:c1:d9:b5:39:80:e9:9f:f0:af:11:e6:
1d:27:9a:d6:1e:07:b3:63:83:61:72:44:54:42:3e:93:c8:e0:
98:8b:52:6a:93:76:fd:47:f9:4e:1a:e6:a2:ac:c0:c7:43:25:
41:47:ad:38:b1:0b:e8:ae:23:ca:8c:60:b3:8f:af:ac:56:21:
67:39:aa:e1:8e:93:80:bf:c7:b4:1d:31:95:b4:4f:45:09:cc:
53:5c:af:ed:fb:08:7e:d1:21:2b:c4:1e:01:86:ef:4d:87:fa:
f2:86:aa:1a:eb:8c:02:4c:91:76:85:c7:44:e9:dd:2c:1d:59:
bd:bb:b2:fc:68:66:7c:f7:68:78:7e:32:52:86:9f:3b:8b:7d:
eb:73:26:9a:06:fa:67:3d:e7:ef:dc:f5:33:71:91:ae:45:eb:
ed:24:12:82:6d:9f:d3:c9:ff:59:d1:a2:95:e0:c3:70:f9:be:
82:87:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:15 2025 by rpki-client