Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: LKts8kpavS+JFjlI9ieJNBNB74QVATyzq6qF3K0+hSA=
Subject key identifier: AF:21:DE:64:F0:4E:D8:58:9E:39:9F:E2:E6:60:10:24:2B:34:6C:EA
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01974CD70BBB776AC339B4D0B03E08DA2BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0E65
Signing time: Sun 08 Jun 2025 00:00:51 +0000
Manifest this update: Sun 08 Jun 2025 00:00:51 +0000
Manifest next update: Mon 09 Jun 2025 00:00:51 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: 2TGy405vvnycQ1dARk33UajmXBRPeiTem2ZIQn/w3bg=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:0b:bb:77:6a:c3:39:b4:d0:b0:3e:08:da:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jun 8 00:00:51 2025 GMT
Not After : Jun 9 00:00:51 2025 GMT
Subject: CN=af21de64f04ed8589e399fe2e66010242b346cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:d6:df:76:2b:1e:32:97:49:94:c8:f5:de:
ab:da:97:85:e4:f7:58:0f:a4:f4:ce:f5:63:3d:1b:
ec:2c:15:89:05:9a:fa:40:cc:21:13:cf:86:9d:7f:
c5:96:de:19:28:01:8c:5b:1d:24:0b:45:47:06:fa:
64:68:95:0e:6d:29:cc:26:2c:41:8d:52:a1:4d:52:
84:e4:e3:2f:fc:f5:41:77:e9:dc:50:80:c9:3e:1d:
fe:0b:e6:cc:bd:44:8b:64:69:35:34:eb:d6:51:17:
a0:38:81:02:17:9c:f1:5b:48:fb:d2:81:37:dc:7f:
57:a6:ee:be:f2:d5:d9:1e:e6:8e:b9:68:e5:09:12:
b3:f3:a2:c8:63:42:c2:c0:0c:6f:ce:24:92:19:04:
2f:d8:44:ab:69:65:b9:6d:ce:ec:21:0a:f5:0a:5a:
49:8a:7e:0e:d2:6a:7e:75:40:5c:19:4d:ca:d4:6c:
e4:90:55:fb:b3:c3:41:32:70:eb:20:bf:f4:ff:8c:
fe:45:b3:ac:9f:41:3e:be:c0:81:45:a6:9d:13:a6:
9c:56:33:cf:74:e2:07:80:8c:fb:43:b3:c2:53:c1:
47:52:46:0d:4a:f8:77:51:b7:61:f5:b8:14:db:c8:
73:c5:70:80:3d:04:20:5a:2b:ef:b3:34:0b:46:ff:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:DE:64:F0:4E:D8:58:9E:39:9F:E2:E6:60:10:24:2B:34:6C:EA
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b4:22:f7:17:93:02:e8:0e:1a:ed:8a:ee:6f:35:c8:a8:07:
23:e4:17:30:94:ec:90:b3:e9:c3:e1:57:17:3c:ad:1a:9c:a0:
4c:70:44:92:7c:2a:0e:53:e3:75:ea:d4:8e:8e:31:da:35:3c:
1b:6a:5a:24:bd:d5:c1:43:7b:7c:af:fe:6a:f5:e3:0d:90:b2:
be:10:87:c3:93:05:ce:e4:75:09:6b:c1:0e:be:b2:95:88:56:
3e:89:3f:6d:ce:79:49:27:16:1b:25:d1:c9:8b:6c:a2:ac:d0:
6e:3e:88:56:cf:5c:4f:61:f7:50:49:24:d9:ca:85:d8:f5:36:
63:dc:c0:7e:6c:47:87:dc:7e:68:51:ed:0b:92:40:8b:18:b3:
72:ad:9c:68:f4:72:4b:cf:9d:22:ae:6f:fd:e7:e1:36:2c:6d:
52:a8:4b:72:7c:bc:31:b7:5b:6d:8f:98:68:12:33:83:67:a5:
67:1c:6f:19:a6:2b:28:13:14:f6:cd:94:85:23:3e:40:10:83:
22:fd:18:4f:e2:22:b5:f2:61:87:52:a8:35:51:31:e3:7e:98:
68:65:a3:5f:0a:82:61:93:af:5a:a2:cc:85:d2:f8:34:32:4e:
4a:3f:3b:bc:b8:80:3e:16:6f:78:a3:f1:5d:c0:87:a5:55:6e:
9c:fc:19:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1wu7d2rDObTQsD4I2ivyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3
YTg3MmMwHhcNMjUwNjA4MDAwMDUxWhcNMjUwNjA5MDAwMDUxWjAzMTEwLwYDVQQD
EyhhZjIxZGU2NGYwNGVkODU4OWUzOTlmZTJlNjYwMTAyNDJiMzQ2Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti3W33YrHjKXSZTI9d6r2peF5PdY
D6T0zvVjPRvsLBWJBZr6QMwhE8+GnX/Flt4ZKAGMWx0kC0VHBvpkaJUObSnMJixB
jVKhTVKE5OMv/PVBd+ncUIDJPh3+C+bMvUSLZGk1NOvWURegOIECF5zxW0j70oE3
3H9Xpu6+8tXZHuaOuWjlCRKz86LIY0LCwAxvziSSGQQv2ESraWW5bc7sIQr1ClpJ
in4O0mp+dUBcGU3K1GzkkFX7s8NBMnDrIL/0/4z+RbOsn0E+vsCBRaadE6acVjPP
dOIHgIz7Q7PCU8FHUkYNSvh3Ubdh9bgU28hzxXCAPQQgWivvszQLRv/3MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8h3mTwTthYnjmf4uZgECQrNGzqMB8GA1UdIwQY
MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It
NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk
LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprQi9xeT
AugOGu2K7m81yKgHI+QXMJTskLPpw+FXFzytGpygTHBEknwqDlPjderUjo4x2jU8
G2paJL3VwUN7fK/+avXjDZCyvhCHw5MFzuR1CWvBDr6ylYhWPok/bc55SScWGyXR
yYtsoqzQbj6IVs9cT2H3UEkk2cqF2PU2Y9zAfmxHh9x+aFHtC5JAixizcq2caPRy
S8+dIq5v/efhNixtUqhLcny8MbdbbY+YaBIzg2elZxxvGaYrKBMU9s2UhSM+QBCD
Iv0YT+IitfJhh1KoNVEx436YaGWjXwqCYZOvWqLMhdL4NDJOSj87vLiAPhZveKPx
XcCHpVVunPwZ8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:41 2025 by rpki-client