Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: /pbfUEgOGOiwbDHE57fDCuXiaMAePMsJjsreBMVsvY8=
Subject key identifier: 9D:09:90:CE:61:58:06:CF:28:50:4D:62:71:98:E0:70:7A:40:16:8A
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 0198A15F898A7860B317390B8A935DCC96E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0D24
Signing time: Wed 13 Aug 2025 03:00:49 +0000
Manifest this update: Wed 13 Aug 2025 03:00:49 +0000
Manifest next update: Thu 14 Aug 2025 03:00:49 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: MirrFPlA3Q9/aPBu8GV68pF4hf1iJNVZDQe3KdcVDhI=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:89:8a:78:60:b3:17:39:0b:8a:93:5d:cc:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Aug 13 03:00:49 2025 GMT
Not After : Aug 14 03:00:49 2025 GMT
Subject: CN=9d0990ce615806cf28504d627198e0707a40168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:a8:10:93:c2:24:e1:9a:47:c9:50:56:29:
16:dc:67:71:24:d6:7f:6b:8a:b4:cb:7c:1f:5b:81:
0c:51:4e:fe:73:53:fa:97:1c:73:1e:98:59:78:14:
96:07:58:9b:93:14:b5:1a:41:1c:49:b8:de:2a:54:
60:ca:e1:38:67:6f:aa:3f:60:3b:60:6e:d8:a1:a9:
fe:e7:5f:6b:91:ef:e9:b3:c5:ce:f8:93:e5:7c:df:
51:58:41:ae:ad:ca:40:e8:10:81:3d:d8:ba:7c:d9:
07:13:61:3a:f4:02:b5:65:0c:13:77:4f:1c:30:66:
c9:c9:68:d6:4c:c3:c5:30:bb:71:71:48:6b:e7:e9:
d7:7f:6d:05:ae:f2:d3:9b:48:65:b4:3b:c3:ab:81:
52:0f:5c:46:f9:cf:6d:e6:ba:77:2f:cb:2f:8b:54:
7c:c7:dd:1b:ae:45:fc:64:bf:9c:a9:7d:b3:2a:a9:
a4:e3:fc:9b:d9:b3:92:1e:53:00:af:4e:98:0d:64:
74:e3:d3:5d:b5:76:8b:c9:ed:3d:3b:d6:60:b2:dc:
98:70:92:9f:78:b3:ef:92:8e:0b:d1:cb:0d:c6:bf:
27:9a:fc:54:84:f3:69:3a:0c:d0:68:f8:14:e3:d1:
f0:93:9c:7d:5c:55:de:ab:58:b3:f7:b1:a7:52:17:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:90:CE:61:58:06:CF:28:50:4D:62:71:98:E0:70:7A:40:16:8A
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:15:33:25:66:02:99:02:ce:c0:bb:ed:a6:f9:25:3a:84:
96:c6:42:d3:a7:34:ed:42:5c:ac:14:19:c8:de:02:e7:1c:3a:
fc:ff:85:df:57:b5:58:ae:95:85:f9:ce:99:3c:1e:1c:2a:d8:
4f:6b:68:a5:bb:b2:ed:99:04:ea:d7:5e:3e:c5:86:42:43:8f:
d9:99:94:1b:26:47:84:28:db:cc:58:a5:b3:8d:3c:92:4d:d2:
b8:b3:e8:ec:0e:0c:73:df:11:c9:1e:29:62:ed:5c:6f:09:10:
8d:00:1e:48:b6:5d:b6:30:5b:5c:bd:93:da:95:4e:11:7f:ec:
b2:3e:c3:9c:b3:f6:ab:60:8b:df:0b:d9:c1:20:ce:04:85:28:
3d:88:e6:37:b8:60:21:9d:f5:46:4d:76:02:71:c3:c4:44:cf:
1a:3a:a9:a4:3f:34:47:18:c2:09:be:1d:be:6b:f9:54:fe:39:
b5:31:ea:10:18:2d:82:6a:71:40:3d:a1:44:b4:0f:db:eb:1f:
87:e5:2d:9f:51:09:ea:95:90:e8:be:fa:b0:a7:01:c2:f0:a1:
82:fb:c9:07:55:e3:6d:a9:86:c5:27:2b:e9:12:e0:bb:19:0d:
53:73:b6:50:55:27:90:65:9b:4d:08:35:e0:d4:cc:1e:04:e1:
16:2b:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:32 2025 by rpki-client