Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: tj6MQ6GGbWIODAEnn6jFP9Ok/LHTluNAiydyZKrEteI=
Subject key identifier: 58:32:23:81:88:41:76:3A:8D:C6:24:23:FD:9C:24:84:8D:CD:A2:A1
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019872CFD0AEA78A552D9060C7C0DFC7B040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 02:01:18 +0000
Manifest this update: Mon 04 Aug 2025 02:01:18 +0000
Manifest next update: Tue 05 Aug 2025 02:01:18 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: j72davsg8nENdSIflqBG91uC9Q+hsaKpU6F9oiTItes=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d0:ae:a7:8a:55:2d:90:60:c7:c0:df:c7:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Aug 4 02:01:18 2025 GMT
Not After : Aug 5 02:01:18 2025 GMT
Subject: CN=583223818841763a8dc62423fd9c24848dcda2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:5e:f1:31:94:75:e2:f0:49:cb:e6:56:34:
ea:f9:28:19:40:93:67:e4:08:99:d3:2c:17:18:a2:
99:ff:1a:9a:7c:4a:6d:a4:c1:e1:a9:5b:8f:51:4b:
fb:74:d2:34:ee:06:65:02:85:58:1c:2f:c4:af:94:
1d:7a:60:84:0b:be:14:55:c9:b1:0e:78:64:43:ef:
df:87:9e:ff:de:ef:2f:96:c6:3a:20:83:2f:37:1d:
e2:64:69:74:d5:f6:6e:42:52:9a:cc:ce:6e:a4:a0:
ee:2d:c8:26:3b:18:a9:7c:aa:00:48:67:07:40:58:
2f:ab:2b:6e:75:63:21:9c:1a:bb:b5:fe:46:73:cb:
49:79:c8:eb:ad:1a:c9:40:f5:82:e4:f3:d9:3c:45:
37:28:b5:fb:92:63:6d:7d:12:5f:17:e6:30:5b:e7:
12:e5:7c:6e:13:c1:f2:12:f4:6e:82:7b:81:80:b4:
af:91:28:62:15:57:71:82:44:2a:32:3e:fd:98:68:
b9:28:7b:92:de:7b:8e:37:21:f0:d7:47:23:ed:1c:
7a:60:b8:e3:71:82:e8:87:23:bc:9a:10:fd:13:2b:
ad:26:ad:98:22:42:35:d0:c2:50:84:da:15:ae:d7:
89:5b:78:a6:76:fa:a9:d4:4a:fd:ce:d4:29:d3:66:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:23:81:88:41:76:3A:8D:C6:24:23:FD:9C:24:84:8D:CD:A2:A1
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:1d:02:2a:7f:5b:c9:78:42:7f:63:d6:3c:2e:c7:49:38:
71:d9:7e:98:85:11:ba:4a:93:fb:44:59:26:b7:0e:d8:89:4c:
f8:1a:43:67:aa:a4:76:11:24:df:1e:8b:04:cb:b0:e8:76:27:
cb:13:03:82:c3:a1:ce:50:43:d6:b7:63:fb:8a:5b:b1:9c:26:
06:2c:51:53:78:f8:d3:a4:38:2b:80:09:e8:77:ae:e5:ee:68:
0c:cd:d3:c3:e1:72:71:06:57:ff:22:17:ed:e0:26:04:84:04:
d5:1b:de:95:a7:af:41:1d:a9:55:ba:5c:91:f3:2b:c1:1b:bb:
b0:8c:7e:53:7c:a1:84:65:73:d1:73:18:ca:e3:8a:27:cb:af:
fd:e6:d4:80:36:54:1d:55:0b:85:8f:be:e0:da:d3:f0:8d:a2:
6a:06:48:32:a6:5b:c6:59:18:22:25:a8:9f:b9:fa:4f:bc:1b:
44:42:7f:30:7b:e4:7c:c7:3b:bd:6a:9f:4a:99:41:58:c1:2d:
ae:e8:5e:82:84:fe:fa:24:b8:b6:5a:b7:c7:ca:6f:fd:78:ad:
38:50:94:1e:1e:df:d1:9d:50:41:30:84:0a:64:ef:c9:ce:90:
12:8b:28:39:b8:51:03:35:b1:dd:0b:80:b5:89:38:41:de:16:
ca:42:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:00 2025 by rpki-client