Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: c64vLo/5pSKTgCorzGxec0EteK9Am1b4pRnE1j/qwfQ=
Subject key identifier: F0:F1:11:AC:A6:85:A5:90:93:74:EA:C6:21:8E:46:F0:8C:39:29:54
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 019768853599B9C76F826DC6DC836A9E2D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 0A08
Signing time: Fri 13 Jun 2025 09:00:49 +0000
Manifest this update: Fri 13 Jun 2025 09:00:49 +0000
Manifest next update: Sat 14 Jun 2025 09:00:49 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: F4f5SoTR0OgsDR7Mzpx4wRPJoV9i8g6bcMdpOAqaR3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:35:99:b9:c7:6f:82:6d:c6:dc:83:6a:9e:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Jun 13 09:00:49 2025 GMT
Not After : Jun 14 09:00:49 2025 GMT
Subject: CN=f0f111aca685a5909374eac6218e46f08c392954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:a1:80:ab:3b:f7:36:a5:2f:b3:1e:11:8d:
4a:aa:a7:75:12:ac:10:d2:88:81:6e:a1:cc:75:74:
ed:7f:04:f8:99:ba:98:e6:3f:2b:e0:a4:85:7b:34:
4f:2e:0a:ac:8e:f3:1f:48:b9:e3:0a:d1:05:06:da:
8c:ce:b8:de:d9:2e:a1:e2:77:c9:8d:ce:1d:16:a6:
60:fd:cd:99:b4:53:0b:d9:03:01:88:ed:c4:73:28:
cd:7e:77:29:a6:ec:a5:33:d8:03:a5:be:dd:e7:5f:
f6:8b:e9:6c:34:ee:42:53:32:5e:7d:32:78:27:e0:
a9:5f:e9:6e:33:84:80:f9:ee:45:ee:bd:e3:e0:93:
6a:ed:84:83:76:99:fe:4b:77:24:17:ba:2f:57:51:
bc:87:f8:db:25:f9:63:02:99:ad:dd:a2:b5:e2:ee:
91:e4:e5:55:53:3f:61:d1:f4:71:a6:62:25:bf:ce:
13:32:87:67:d8:58:c4:d5:5f:bd:c1:14:4a:da:8f:
8e:70:cb:af:bd:f5:f7:ba:ea:e0:d7:66:95:df:84:
f3:1a:9b:02:5f:06:6f:00:7e:b7:5b:d9:13:c1:7b:
34:df:75:84:03:7e:ab:5a:60:b1:c4:f9:65:56:aa:
80:02:25:ee:c8:f7:ac:7e:64:3d:f6:4b:fd:72:d7:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:11:AC:A6:85:A5:90:93:74:EA:C6:21:8E:46:F0:8C:39:29:54
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:55:28:d0:4f:5a:b7:50:9c:a0:33:55:e7:c6:8d:f3:eb:99:
d5:01:d4:ba:32:26:0a:9a:1a:e6:ed:4d:d8:cc:93:bb:44:96:
7c:fc:f5:07:f4:89:c5:15:16:e5:e4:ce:98:c2:00:f5:df:7b:
38:da:7d:25:b2:16:c0:c6:ac:21:17:50:dc:8c:91:8a:a1:2b:
00:dc:b6:b4:0c:d0:a5:31:c2:62:d4:17:37:20:c3:b9:8d:7b:
0c:0a:a1:23:69:b4:73:ee:40:d7:44:f5:16:9d:73:82:eb:5e:
3c:df:39:85:17:d0:98:a5:f9:ca:55:7a:67:54:0e:a9:6f:e4:
7e:6d:c7:42:46:5a:7d:6b:1b:b8:aa:e8:74:9f:87:58:d4:9c:
04:3f:02:6a:08:06:86:dd:b7:79:69:b5:c6:b1:48:c7:b7:09:
e2:a2:5e:af:d1:17:d7:eb:14:a9:04:12:fe:58:d6:20:b6:c9:
f4:26:a8:4f:61:5e:38:d1:66:07:00:61:e5:35:e5:19:11:21:
77:c5:b1:90:ed:d0:0e:18:d6:ce:79:f9:56:85:99:40:8f:32:
6a:4c:0e:c5:39:7d:8e:14:0a:f4:ac:1f:d1:74:47:41:f8:f1:
22:b0:3f:13:df:da:83:15:d5:a4:a1:f3:b1:b9:d7:03:c3:de:
29:83:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:00 2025 by rpki-client