Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: bYMJdnDtQSy5GcmVGjZ7J0T41mh/KqklH5w9D1Zn+Gk=
Subject key identifier: 19:B1:44:6E:B9:BB:98:1E:AE:0A:15:46:74:3A:DF:65:70:39:2D:8C
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 0198978161E0D03B8BF241940E78E6784934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 05AC
Signing time: Mon 11 Aug 2025 05:01:35 +0000
Manifest this update: Mon 11 Aug 2025 05:01:35 +0000
Manifest next update: Tue 12 Aug 2025 05:01:35 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: Tg13sPYJotzqcOVypZmc0Z3otLeJ66/spxR9O70jKK4=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:61:e0:d0:3b:8b:f2:41:94:0e:78:e6:78:49:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Aug 11 05:01:35 2025 GMT
Not After : Aug 12 05:01:35 2025 GMT
Subject: CN=19b1446eb9bb981eae0a1546743adf6570392d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:1c:62:1b:1d:ba:51:31:da:2a:2c:ff:fd:
75:8f:88:1d:68:5f:42:df:85:1c:e7:c2:bb:96:2a:
fe:11:59:92:7b:6c:c2:97:36:3b:b0:24:3e:01:ec:
0a:b8:00:89:94:32:4d:fa:73:bb:e4:f7:e6:ab:11:
6b:61:9a:76:f6:b3:78:da:73:1d:46:03:35:f6:dc:
2e:58:b1:61:59:19:2f:7b:60:18:a7:84:08:98:be:
c3:7a:e0:dd:ca:78:35:00:05:8b:eb:01:a5:07:73:
78:d2:55:43:27:1d:43:c5:34:8c:6c:b8:d9:c3:26:
1d:ba:6e:22:5e:64:48:57:b4:ac:00:c3:77:10:bb:
07:86:12:c5:94:5f:a2:40:30:96:e4:17:12:f2:87:
75:8c:21:9f:2b:9a:49:98:a3:29:d1:4e:40:4b:2a:
b7:ad:da:fb:86:87:b2:42:28:da:ed:73:d5:d1:8c:
a8:cc:ce:1e:eb:37:06:a3:86:78:6f:ca:a5:0d:ef:
84:cc:8d:65:d9:95:98:94:43:e5:f0:27:3c:c2:80:
d2:a3:f4:29:79:d5:a7:99:f6:0f:ae:ab:49:83:10:
a2:60:34:ae:28:04:57:c8:c2:50:5e:a8:9e:55:78:
b8:d3:23:da:a5:9c:f6:df:70:84:c1:4e:48:92:54:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:44:6E:B9:BB:98:1E:AE:0A:15:46:74:3A:DF:65:70:39:2D:8C
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b6:de:0e:70:53:c6:c8:77:9d:ec:24:e3:f6:1b:d8:d3:ae:
18:f1:22:7a:7a:19:b9:ff:a8:a9:12:03:2d:ae:17:0c:67:4a:
db:7f:21:a0:72:75:95:52:44:06:6e:b6:bf:ca:79:8d:3b:4b:
c7:cc:a5:fc:c3:fe:57:57:34:a4:a7:ef:fb:2d:65:d7:85:ee:
e8:2b:1f:2b:0f:32:aa:d7:60:22:17:1c:98:d9:65:f2:6f:c8:
24:9d:28:e9:ce:e3:20:9d:cb:e2:fb:e5:ed:3b:7d:c6:f9:ae:
16:8e:8a:49:9f:45:03:ed:67:25:78:eb:e7:bf:e2:e2:b9:1b:
3f:ac:01:c7:6d:b4:1f:1f:84:35:d3:76:ec:f1:cc:db:2c:78:
8c:a4:f6:4a:be:40:4f:a6:a6:3d:8c:69:a6:0f:6f:f0:59:46:
fc:59:c4:8a:75:9b:8e:de:28:9f:85:14:73:cc:b5:98:74:06:
6a:3f:e7:f3:e5:3a:1b:87:ed:f1:75:c3:75:f6:06:d3:5e:2e:
cf:66:71:fd:b0:a2:be:dd:c6:e5:1f:3c:f3:19:09:c1:94:b4:
ec:c1:11:24:a5:22:36:0b:d9:9f:5c:69:3a:9d:e5:be:2c:b3:
a2:49:29:e2:d8:b1:de:e4:27:e6:65:78:9c:ed:94:fc:20:25:
1e:50:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:15 2025 by rpki-client