Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: /vqK+0kWCKwoGq7YAfrWas/E99KYJUil+Dn/2cR3lk8=
Subject key identifier: E5:2D:A7:B8:50:46:45:40:C1:2C:04:4F:3E:DE:27:55:1E:23:72:A5
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 01976D06750049842631BE135E94FD6DE036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 0818
Signing time: Sat 14 Jun 2025 06:00:29 +0000
Manifest this update: Sat 14 Jun 2025 06:00:29 +0000
Manifest next update: Sun 15 Jun 2025 06:00:29 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: HThzr30ddBjjozl/pqE0vz5jpHg8G9rpp7qxyFqnm0c=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:75:00:49:84:26:31:be:13:5e:94:fd:6d:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Jun 14 06:00:29 2025 GMT
Not After : Jun 15 06:00:29 2025 GMT
Subject: CN=e52da7b850464540c12c044f3ede27551e2372a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9b:a4:d1:1b:14:ac:66:c9:cd:2c:7e:f9:25:
2c:52:7a:e6:2f:58:40:c6:5c:e9:89:0e:30:06:61:
e2:d8:06:cf:24:78:1c:91:d3:ac:6a:6b:67:88:b8:
55:74:c4:3e:3d:29:4e:40:89:ce:e4:7a:79:cc:df:
36:e3:7e:bf:a1:fe:9b:dc:88:ce:27:1c:15:a4:35:
2a:d8:a3:fe:7a:fd:d7:2b:60:d8:0c:35:78:88:bb:
d5:4e:56:3e:0f:ae:29:ff:94:a8:7e:d0:86:80:a1:
f0:93:d6:00:07:86:70:13:9d:1c:22:40:ed:45:5c:
c6:ff:58:a0:b3:26:22:a0:7b:2c:e4:c8:3f:8d:bd:
9a:12:73:7f:ea:e6:7d:e3:53:18:ae:a2:42:2d:98:
ce:7b:2a:ef:b6:ec:8d:8f:17:b7:92:c7:46:31:5e:
b3:53:4c:60:9d:ab:15:76:eb:af:e8:c6:41:34:d8:
50:22:6b:e3:42:94:40:d0:38:b9:41:7e:85:3e:4a:
13:3c:7d:a3:92:69:10:bd:9b:67:ac:7c:2f:4a:b6:
c9:37:b8:43:43:5a:0b:8e:8d:1b:44:ed:6d:db:a4:
ba:85:1b:e2:63:2c:36:2f:ec:e6:0f:1a:50:c5:f8:
97:0d:fa:63:08:3a:6a:ca:2d:26:28:9f:76:a7:72:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:A7:B8:50:46:45:40:C1:2C:04:4F:3E:DE:27:55:1E:23:72:A5
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:cb:29:8f:50:a7:2e:3e:2c:00:56:14:55:fa:94:3e:ce:0d:
df:7e:ed:76:6b:97:ed:7e:e2:77:ac:e0:e3:9e:10:7f:f1:ac:
13:71:91:68:64:36:52:cf:a1:e6:79:90:d0:4d:47:76:bf:71:
32:c1:82:a3:4a:23:e1:59:19:d8:78:21:a6:63:04:e0:4e:51:
78:dc:6a:3a:03:07:c3:2c:f0:5b:7d:86:ab:fc:3c:75:15:cf:
cc:02:dc:c0:b8:05:4d:72:12:d3:3d:c5:99:85:41:14:af:a6:
7e:95:7a:c6:00:6e:d1:82:6f:37:68:3a:92:72:67:d1:b2:23:
1a:b5:3d:06:7d:4d:43:33:57:5d:a2:c9:91:98:69:17:d5:fb:
38:cb:bc:6d:95:ba:d0:a2:1d:19:ce:ec:64:84:1b:9e:c3:8f:
ad:ed:c6:4b:5a:28:26:e2:e5:29:76:a1:2a:24:ce:f8:10:53:
df:e2:25:27:c0:08:e1:f6:44:f8:59:bb:fb:f9:85:fd:ea:8e:
dc:38:51:44:4b:58:46:b0:d8:45:4d:2c:53:78:4b:66:57:7b:
98:94:e2:d3:77:57:60:af:08:81:88:c4:8e:e1:ca:0e:5c:fa:
a2:01:00:21:46:28:46:b1:c9:9c:9a:81:ce:a1:63:0a:63:05:
16:f0:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:46:52 2025 by rpki-client