Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: 4Cek2aG1x1RUHBJqMob4LCWLP0D6xixdU7Y8+xYy9zo=
Subject key identifier: 9C:70:C9:D0:EA:24:76:2B:1C:BB:F4:79:ED:26:0B:DF:41:88:F9:37
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 0199338049E603E597C706C7692C216B5E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1075
Signing time: Wed 10 Sep 2025 12:01:09 +0000
Manifest this update: Wed 10 Sep 2025 12:01:09 +0000
Manifest next update: Thu 11 Sep 2025 12:01:09 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: Xl4O/sOQAiyO2z8gh0l7xdd1Ruc4pWiB2vFcH8xP3HM=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:49:e6:03:e5:97:c7:06:c7:69:2c:21:6b:5e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Sep 10 12:01:09 2025 GMT
Not After : Sep 11 12:01:09 2025 GMT
Subject: CN=9c70c9d0ea24762b1cbbf479ed260bdf4188f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:b4:b2:7d:27:0f:8b:25:64:b5:03:1c:26:
53:97:0f:3e:6b:43:dd:a8:8a:e0:bc:a7:70:17:01:
93:ad:1f:24:c3:59:85:75:ef:b4:ab:b7:8d:b2:43:
48:7e:c5:44:72:11:0b:1b:8e:60:27:9a:0e:05:cb:
c8:93:3c:7d:03:91:9e:3f:98:0b:e1:52:03:59:f7:
e8:24:8f:28:7c:37:c1:43:b0:20:ce:cc:ac:0c:bf:
91:39:3b:35:61:79:a9:c9:d9:03:15:dd:c4:9a:fc:
1c:08:04:41:6f:23:b4:36:2d:fe:ee:be:36:07:9b:
b1:bf:c3:96:f4:27:e3:1e:a5:89:20:83:7b:8d:16:
65:1d:57:94:5b:08:5f:ea:b6:4d:30:32:54:b1:fd:
21:56:27:e2:b6:91:e5:18:b8:cc:7a:cf:1e:6f:ac:
e0:ce:fd:8d:e8:c5:bc:98:aa:67:97:c4:cd:db:9d:
4f:88:88:85:34:2b:fd:ad:a0:8d:c5:d8:33:bb:b5:
df:f5:30:ef:07:b8:29:d3:74:9d:b7:ee:4b:03:03:
27:55:b0:c7:7d:0a:6e:fb:ff:45:15:8b:17:04:8c:
00:61:88:42:4f:a6:8a:f1:85:58:37:43:69:09:6d:
fd:e9:81:7e:4e:f2:9d:b1:a1:8d:bb:6b:28:38:85:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:C9:D0:EA:24:76:2B:1C:BB:F4:79:ED:26:0B:DF:41:88:F9:37
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0c:41:8b:fe:52:41:c7:fc:b8:fd:38:cd:58:67:1b:5d:81:
18:7b:6c:50:87:c2:88:f5:9e:b9:6f:f2:ee:cd:72:8d:82:c7:
f0:ae:bc:a9:72:04:78:8e:a9:e1:9e:e4:a6:4d:17:83:61:d3:
57:e9:0b:ef:0b:1f:e1:53:a2:91:d0:a6:c0:fb:22:78:a0:1d:
41:67:1b:7e:9f:4e:4f:2e:d7:3b:95:26:86:fd:fc:c8:78:e2:
54:ff:67:ad:76:43:c5:76:e5:ea:ed:f8:4c:1e:ee:dd:72:ee:
ad:90:9f:92:5c:d1:de:57:00:a6:8b:02:97:5c:e3:36:91:cf:
b2:fe:63:06:86:ac:28:14:b5:f5:1b:4d:d0:f9:e6:b8:e9:63:
33:1f:a1:17:cb:79:40:be:1b:ac:ae:6f:f4:06:65:27:55:3f:
5e:1a:5e:29:b1:11:25:42:8e:9f:7d:10:18:cb:34:e7:39:de:
c9:2d:c5:c3:87:7c:e8:a0:c2:dc:5b:52:9f:b3:e0:62:42:cb:
28:a4:52:4a:2e:69:63:9d:7d:93:97:e9:dc:35:40:1a:7e:b8:
c8:c9:4b:9b:2e:6c:28:61:a7:8f:91:bf:81:48:c6:dc:56:54:
e5:48:f6:c2:b6:d6:39:43:db:b9:82:2f:02:86:14:81:a8:2d:
95:f3:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:45:13 2025 by rpki-client