Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: 1lrwtCoDMTHMo94Lvl7mMuRu6Dc/KmjNZRoifVtnERw=
Subject key identifier: 1C:04:A8:5B:F4:43:CB:4B:54:B5:93:C9:E5:9C:E8:93:73:84:47:41
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019788EBDDFC9945E1B92F231DF52A649DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0DCB
Signing time: Thu 19 Jun 2025 16:00:48 +0000
Manifest this update: Thu 19 Jun 2025 16:00:48 +0000
Manifest next update: Fri 20 Jun 2025 16:00:48 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: FOEKff+FvKNv+nI2DNq/jnBa/3o86/fwC2gAvHmqN2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:dd:fc:99:45:e1:b9:2f:23:1d:f5:2a:64:9d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jun 19 16:00:48 2025 GMT
Not After : Jun 20 16:00:48 2025 GMT
Subject: CN=1c04a85bf443cb4b54b593c9e59ce89373844741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:c1:84:71:a9:90:06:12:fe:aa:ae:56:df:
fb:f8:93:7b:4e:04:e7:b6:87:fe:02:71:ef:9e:80:
20:5f:66:9a:2a:8c:86:bb:89:38:41:8e:4a:33:95:
25:e6:ee:aa:e9:8e:df:bd:a3:31:d1:4a:ff:6c:82:
b2:f6:ae:89:c7:f3:8c:2a:31:01:21:1b:2e:36:d9:
d7:5d:ef:df:a9:b9:c6:7b:2c:73:4f:66:1d:2d:50:
c5:17:d8:53:9f:d1:a1:72:2a:77:dd:45:92:87:54:
31:57:fc:4b:0d:3c:56:b9:b5:17:de:99:c5:b6:92:
10:21:29:7f:70:27:6d:6e:23:83:ec:56:ac:3f:2a:
90:b3:d7:98:f2:7a:53:21:31:42:49:92:0c:1e:c3:
b4:3f:bc:e6:eb:13:1e:b0:10:e4:6e:af:98:f6:11:
38:f6:b8:4c:9f:bb:2b:c7:11:eb:64:39:35:ee:ab:
d4:ce:27:30:0b:23:d4:82:38:10:f2:2b:02:93:81:
c3:91:47:82:aa:5f:95:0c:85:e6:ee:0f:53:fa:4f:
45:56:0a:5b:c8:52:4c:84:c7:9f:42:c3:0a:c5:53:
dc:4d:1e:ec:21:b1:fb:07:fa:22:5d:40:18:16:fc:
bd:56:6e:d5:d5:12:e2:e5:73:58:3d:cb:f8:2b:00:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:A8:5B:F4:43:CB:4B:54:B5:93:C9:E5:9C:E8:93:73:84:47:41
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:f0:4a:af:a4:b3:98:78:70:49:c4:c6:90:52:ca:1c:f9:
71:fa:8e:2d:91:f7:e9:dd:31:ac:37:c3:5c:6f:f5:40:aa:66:
d6:c0:63:c4:19:17:9c:7a:51:ad:4f:09:0b:fd:92:94:96:12:
df:1f:b7:59:f7:d0:f2:99:63:e8:9f:bf:d1:f1:21:60:e3:0e:
28:68:58:de:ab:e2:7b:f5:03:be:a6:dc:ec:56:02:dc:e8:83:
c1:ad:14:61:58:dd:01:95:7f:7d:3d:8c:9a:61:0f:e9:0f:8e:
a4:be:19:4a:a7:f4:3f:17:b2:6d:18:cb:d0:3c:4f:f4:42:5f:
1a:95:4f:a6:7d:dd:65:02:7a:0c:fa:bc:43:6a:06:e2:69:46:
ec:61:24:30:53:09:94:c0:ba:6c:4e:86:19:26:d5:0a:41:e9:
37:4d:74:62:4f:03:d7:85:75:d7:d6:91:f1:b8:1d:d2:a6:96:
89:3d:4f:15:93:50:59:da:40:ab:e7:20:99:15:cf:dc:1f:cf:
24:1c:db:82:60:ba:7f:77:ed:dc:36:e2:0d:3f:d3:ed:38:2b:
a1:c9:a0:26:4d:03:47:99:43:1d:9a:e9:98:80:75:ef:3d:d0:
23:bd:b2:91:c8:12:09:57:25:3c:e2:2c:9e:47:3f:71:51:21:
86:13:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:18:55 2025 by rpki-client