Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: pwGOqPJjs2YMgF87zQh1aRJxuvnA8B6ebjh2W3k4Cbw=
Subject key identifier: A9:21:4B:51:ED:FE:6A:14:13:2A:C2:41:42:A0:AD:B7:EC:A6:5C:8F
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 019896A4E5FB4FAF633BB051B9EE475751E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 08B2
Signing time: Mon 11 Aug 2025 01:00:45 +0000
Manifest this update: Mon 11 Aug 2025 01:00:45 +0000
Manifest next update: Tue 12 Aug 2025 01:00:45 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: yhSxoZOtag6KNwL745imbjEiPvO6ZUTGm5LjuyT04O4=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:e5:fb:4f:af:63:3b:b0:51:b9:ee:47:57:51:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Aug 11 01:00:45 2025 GMT
Not After : Aug 12 01:00:45 2025 GMT
Subject: CN=a9214b51edfe6a14132ac24142a0adb7eca65c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:52:a1:7c:e9:fe:44:16:b4:45:93:1e:06:
06:c1:1f:c5:83:ad:51:3a:f7:fe:fd:fe:c3:47:31:
ee:53:b5:ad:8a:37:b7:c1:ec:91:e0:cb:23:ac:22:
b6:05:73:a8:5c:5f:71:b2:04:c1:74:09:21:f2:c2:
fb:aa:9b:69:a4:df:b1:5e:69:41:8d:35:fb:b0:26:
0b:20:c2:3d:cf:e9:31:6a:1e:d9:01:7d:af:65:57:
c9:42:4a:7e:b3:a7:6f:3c:fb:4e:85:b4:3b:af:23:
2f:78:53:25:8b:4e:b1:fb:3b:87:18:5f:22:2f:52:
15:1c:67:96:44:36:a9:ec:44:6c:96:df:00:dd:ac:
4a:c9:7d:ab:27:17:9e:57:bc:79:e6:02:9c:e1:47:
ff:45:56:80:20:3f:45:4d:d2:30:58:83:86:3f:06:
a5:ad:18:70:46:7c:2e:59:18:e0:be:2d:a4:ae:15:
98:1a:7a:ae:89:5b:20:51:99:64:f7:19:27:e7:a0:
65:2a:ad:9f:4b:dc:10:ed:5e:a0:2e:f5:6f:79:fa:
a2:b7:0c:46:fc:4c:6d:49:33:55:28:aa:6e:d0:08:
7a:74:8f:4a:cf:cc:1b:00:be:fa:41:8a:1b:a6:c1:
23:b2:47:11:46:5d:eb:cf:83:8f:4a:b0:a3:35:6e:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:21:4B:51:ED:FE:6A:14:13:2A:C2:41:42:A0:AD:B7:EC:A6:5C:8F
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5e:1c:ae:95:66:99:e0:64:6a:4f:8c:27:1b:65:be:22:71:
0b:a3:57:df:90:d9:a9:59:02:9f:ae:54:ff:29:8f:69:95:aa:
8a:ed:f9:06:dc:e1:8a:77:9d:fe:41:13:62:84:75:bd:ad:12:
4d:60:8e:85:77:72:1d:54:8b:4e:6b:2e:29:9a:1f:81:71:7a:
28:f5:81:6c:d1:dc:da:be:9a:98:f6:3c:68:b5:a5:7b:c5:71:
5f:a5:e4:d1:54:af:3b:43:97:f7:e3:3d:6e:48:89:7b:a6:73:
9d:4d:0c:11:81:1b:10:d4:ee:4a:ec:06:93:79:12:ad:dc:54:
19:1a:32:81:0d:f0:56:37:02:8b:a3:00:42:f5:55:df:f4:ee:
2e:00:fe:17:1a:47:51:10:de:45:bb:ff:de:1d:32:c9:27:fc:
3a:1a:a2:10:73:7a:4e:51:03:ac:fb:7e:f4:ed:6b:22:f1:85:
5d:1c:5d:14:3b:47:a2:8c:f7:f8:0b:e1:fe:0e:b9:97:70:7d:
c5:0f:21:2b:79:2a:ce:83:bc:b9:96:1e:0d:5b:28:6b:1b:15:
9d:ad:64:a3:29:86:01:4f:ba:3d:75:de:6b:14:92:29:03:d1:
44:cf:72:2d:e8:3f:2e:f4:90:99:f7:d4:80:d6:b2:d3:28:ef:
51:a7:61:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpOX7T69jO7BRue5HV1HpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh
ZGM5OWQwHhcNMjUwODExMDEwMDQ1WhcNMjUwODEyMDEwMDQ1WjAzMTEwLwYDVQQD
EyhhOTIxNGI1MWVkZmU2YTE0MTMyYWMyNDE0MmEwYWRiN2VjYTY1YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3hSoXzp/kQWtEWTHgYGwR/Fg61R
Ovf+/f7DRzHuU7Wtije3weyR4MsjrCK2BXOoXF9xsgTBdAkh8sL7qptppN+xXmlB
jTX7sCYLIMI9z+kxah7ZAX2vZVfJQkp+s6dvPPtOhbQ7ryMveFMli06x+zuHGF8i
L1IVHGeWRDap7ERslt8A3axKyX2rJxeeV7x55gKc4Uf/RVaAID9FTdIwWIOGPwal
rRhwRnwuWRjgvi2krhWYGnquiVsgUZlk9xkn56BlKq2fS9wQ7V6gLvVvefqitwxG
/ExtSTNVKKpu0Ah6dI9Kz8wbAL76QYobpsEjskcRRl3rz4OPSrCjNW75nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkhS1Ht/moUEyrCQUKgrbfsplyPMB8GA1UdIwQY
MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt
ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw
LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK14crpVm
meBkak+MJxtlviJxC6NX35DZqVkCn65U/ymPaZWqiu35Btzhined/kETYoR1va0S
TWCOhXdyHVSLTmsuKZofgXF6KPWBbNHc2r6amPY8aLWle8VxX6Xk0VSvO0OX9+M9
bkiJe6ZznU0MEYEbENTuSuwGk3kSrdxUGRoygQ3wVjcCi6MAQvVV3/TuLgD+FxpH
URDeRbv/3h0yySf8OhqiEHN6TlEDrPt+9O1rIvGFXRxdFDtHooz3+Avh/g65l3B9
xQ8hK3kqzoO8uZYeDVsoaxsVna1koymGAU+6PXXeaxSSKQPRRM9yLeg/LvSQmffU
gNay0yjvUadhpQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:02:57 2025 by rpki-client