Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: QxuAJkM2ot30zMrO2lbOeRZDonnlJae6WOq3Qf2AQR4=
Subject key identifier: BF:A1:8F:DD:07:ED:5F:20:80:CC:9A:84:7E:B2:76:94:E4:CB:85:13
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 01974D0DAAF465381E2DA10CB0547D3919BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0AF3
Signing time: Sun 08 Jun 2025 01:00:30 +0000
Manifest this update: Sun 08 Jun 2025 01:00:30 +0000
Manifest next update: Mon 09 Jun 2025 01:00:30 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: wC1vzSJA9hTG6E4zWrr4ysTQtDy9Q2kXZ3Kl6dOtQ5I=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:aa:f4:65:38:1e:2d:a1:0c:b0:54:7d:39:19:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jun 8 01:00:30 2025 GMT
Not After : Jun 9 01:00:30 2025 GMT
Subject: CN=bfa18fdd07ed5f2080cc9a847eb27694e4cb8513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:11:3d:af:7c:20:78:3b:a9:77:90:3c:70:
74:91:d7:21:38:bb:e4:42:52:00:2a:e9:2f:98:66:
0b:de:f0:ce:dd:a2:4d:91:4c:3e:c6:53:87:a2:65:
d1:3a:a4:94:80:f5:c2:b4:50:e2:40:ae:11:38:22:
0b:e2:38:c4:b2:83:1d:28:c4:1e:b0:0c:71:cf:6c:
9d:69:1d:d4:ac:f2:e9:83:a5:30:42:34:a4:95:c2:
41:85:85:70:a1:5a:d1:1a:23:ce:12:3b:09:0f:d2:
5d:5a:3e:b7:e5:e4:b5:d0:78:85:76:71:40:fd:2f:
ed:85:ec:98:cb:22:18:f3:3c:97:47:f4:25:70:a4:
d4:da:0c:8e:8f:02:87:46:9a:74:08:91:a8:40:8d:
b3:b8:0d:e7:b1:8e:9d:14:b8:a8:99:f1:f0:b0:33:
60:82:a5:78:a6:49:95:32:d0:24:6d:e7:f8:d2:f4:
bf:ea:42:4a:20:02:de:50:49:34:07:68:df:fe:41:
62:6b:53:79:90:26:34:ad:90:dc:5f:93:b5:bf:30:
66:45:04:cc:ec:3f:25:37:6e:28:3c:44:42:f0:06:
aa:0b:69:71:ea:ec:8f:01:2a:aa:35:46:5b:40:f6:
f7:35:86:8b:63:05:6e:47:45:07:09:c1:0b:72:7a:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:8F:DD:07:ED:5F:20:80:CC:9A:84:7E:B2:76:94:E4:CB:85:13
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e6:c5:5e:86:9a:4d:a6:34:eb:16:3a:7c:b0:c8:f6:e5:ba:
2f:76:f9:35:e6:28:25:75:9c:bd:f1:2e:0f:57:e1:ff:8a:32:
28:aa:6b:e0:8c:05:14:7f:93:2a:5b:25:0c:de:64:f1:2f:9e:
2f:a1:ab:17:1d:ca:19:af:f5:10:31:3d:23:09:d0:54:0f:5a:
ac:d4:a1:38:c5:f3:f0:b1:24:f9:c2:6f:7b:98:62:82:21:0e:
5f:5d:e4:f3:fa:d2:ab:9f:54:61:a2:9f:fa:a3:b6:7f:91:70:
81:8c:69:e4:1d:12:c1:4c:bf:3a:e8:93:f1:01:8e:0a:87:b0:
b7:dc:f7:8a:d3:9c:20:7f:9d:38:f3:d6:50:34:df:2a:5c:bb:
68:9d:6f:1a:00:ad:60:08:b4:b4:7e:d0:fe:6c:a9:56:2a:da:
0b:58:4c:ea:95:c4:34:73:31:c0:f0:90:f8:c1:6f:3d:e5:3c:
1f:ec:ca:c5:11:97:03:f3:32:4a:a2:3b:5b:ce:ea:cd:fb:00:
e0:c7:7d:81:9a:45:43:8a:88:d4:c0:2f:51:25:97:80:76:2a:
81:b4:0e:d6:f7:b7:fc:50:04:78:39:47:f4:38:eb:93:5a:7e:
26:1c:4a:99:f2:ff:08:f1:f4:b5:60:7a:6c:bc:52:78:58:dd:
57:9f:01:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDar0ZTgeLaEMsFR9ORm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2
MDE3Y2UwHhcNMjUwNjA4MDEwMDMwWhcNMjUwNjA5MDEwMDMwWjAzMTEwLwYDVQQD
EyhiZmExOGZkZDA3ZWQ1ZjIwODBjYzlhODQ3ZWIyNzY5NGU0Y2I4NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc0RPa98IHg7qXeQPHB0kdchOLvk
QlIAKukvmGYL3vDO3aJNkUw+xlOHomXROqSUgPXCtFDiQK4ROCIL4jjEsoMdKMQe
sAxxz2ydaR3UrPLpg6UwQjSklcJBhYVwoVrRGiPOEjsJD9JdWj635eS10HiFdnFA
/S/theyYyyIY8zyXR/QlcKTU2gyOjwKHRpp0CJGoQI2zuA3nsY6dFLiomfHwsDNg
gqV4pkmVMtAkbef40vS/6kJKIALeUEk0B2jf/kFia1N5kCY0rZDcX5O1vzBmRQTM
7D8lN24oPERC8AaqC2lx6uyPASqqNUZbQPb3NYaLYwVuR0UHCcELcnrM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+hj90H7V8ggMyahH6ydpTky4UTMB8GA1UdIwQY
MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt
NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl
LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbObFXoaa
TaY06xY6fLDI9uW6L3b5NeYoJXWcvfEuD1fh/4oyKKpr4IwFFH+TKlslDN5k8S+e
L6GrFx3KGa/1EDE9IwnQVA9arNShOMXz8LEk+cJve5higiEOX13k8/rSq59UYaKf
+qO2f5FwgYxp5B0SwUy/OuiT8QGOCoewt9z3itOcIH+dOPPWUDTfKly7aJ1vGgCt
YAi0tH7Q/mypViraC1hM6pXENHMxwPCQ+MFvPeU8H+zKxRGXA/MySqI7W87qzfsA
4Md9gZpFQ4qI1MAvUSWXgHYqgbQO1ve3/FAEeDlH9Djrk1p+JhxKmfL/CPH0tWB6
bLxSeFjdV58BEw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:58 2025 by rpki-client