Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: Ji/rU1/YPcwq/KgrzNq8O65ZYUw2CqwkmPhG9C450a0=
Subject key identifier: 94:23:FA:60:1F:21:B1:54:A8:D6:98:1C:2B:9B:C9:38:1B:C0:BD:F5
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019779B030E4C01D1527D3417473F2884C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1529
Signing time: Mon 16 Jun 2025 17:01:19 +0000
Manifest this update: Mon 16 Jun 2025 17:01:19 +0000
Manifest next update: Tue 17 Jun 2025 17:01:19 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: meJxnC2pSWWjML1vkwKE9yauSGVeNAPi55Z2HWuCKLM=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:b0:30:e4:c0:1d:15:27:d3:41:74:73:f2:88:4c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jun 16 17:01:19 2025 GMT
Not After : Jun 17 17:01:19 2025 GMT
Subject: CN=9423fa601f21b154a8d6981c2b9bc9381bc0bdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:c6:04:73:8d:18:cd:ac:3f:5f:98:29:37:
7c:d3:6f:2b:52:ca:eb:75:6a:aa:18:66:37:0c:51:
66:d0:d6:e1:28:68:b7:e4:63:57:ee:ea:bb:3c:a0:
98:e6:80:e6:09:53:f6:f1:c3:c0:2d:29:07:0d:03:
24:eb:10:ff:b3:66:f6:67:f2:6a:18:c0:04:39:d6:
0e:a1:75:6f:80:e1:51:2e:5f:e8:13:26:b5:fa:11:
f3:7a:9f:f6:c1:3a:c5:bd:52:c7:f2:cf:a7:5d:ae:
f2:17:94:06:0b:78:04:ac:69:80:0e:b7:4d:c0:32:
62:9e:7c:6a:a3:84:36:ca:36:da:ea:81:3f:89:5d:
16:8c:27:cb:ea:66:f8:7f:d6:c5:df:f6:9c:2a:eb:
94:04:82:eb:4d:01:9c:de:86:50:ca:08:a6:fb:b9:
14:55:8e:91:f6:fd:14:af:a4:52:28:6e:b7:b1:1b:
80:4b:b0:7b:81:cd:56:0c:19:b1:03:3a:8d:03:0d:
af:0c:4c:44:ce:14:46:e2:fd:1d:8c:16:77:4c:b3:
b0:b3:35:c6:eb:e9:9a:8d:5d:41:62:ba:5a:d9:7a:
90:b8:7e:e7:5e:00:38:9a:87:15:89:40:96:e4:8b:
53:31:b4:56:3a:b3:f4:e4:c9:5d:31:9a:7e:d0:48:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:FA:60:1F:21:B1:54:A8:D6:98:1C:2B:9B:C9:38:1B:C0:BD:F5
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:2c:3d:90:39:83:2b:3d:41:2a:11:15:67:46:2f:f8:7d:
91:18:81:f5:55:ef:bb:28:22:4d:e1:a5:35:0d:90:9c:d5:07:
ed:b4:07:96:53:52:70:77:46:36:41:23:8a:5f:c1:4f:6c:f1:
5f:27:1e:e9:a3:82:9b:51:08:ff:1e:71:72:d1:8f:65:68:63:
6d:b0:f9:d6:9c:c4:3a:4e:00:cb:ed:c5:4d:82:65:38:e4:8b:
be:8e:c2:64:ee:e9:d1:ef:fb:56:b4:ca:3e:16:42:b7:fd:42:
ab:c8:fa:a6:92:4d:1c:6b:8e:96:95:09:3e:2b:b6:67:3a:e8:
b1:59:7e:bd:19:b5:76:e6:b2:e5:18:da:0f:c0:d5:3c:fb:17:
f7:e7:46:b7:59:b7:a7:69:21:62:dc:c3:41:89:a0:de:2f:3e:
1e:8c:ef:b1:d8:b2:b7:fa:b0:3e:39:c7:b2:d9:6e:63:8b:d9:
06:16:01:1f:15:da:0a:1e:23:44:38:61:ca:07:3e:71:58:54:
e5:0c:c3:95:09:fa:94:c3:e6:72:d3:05:10:78:5a:6f:b7:ce:
47:57:a1:fc:c7:e4:72:b1:15:b7:bc:c6:c5:ec:e4:8f:0a:ab:
17:c7:9b:40:8b:c4:60:1d:eb:e9:89:b7:aa:f0:51:3d:e3:d8:
8f:a1:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:16:31 2025 by rpki-client