Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: HquSLpr5Gp61DtEuTe1rY2b0KEIKRGhG8/31hv+sMGk=
Subject key identifier: F2:28:CB:93:AE:ED:C3:02:93:71:A0:71:3F:A3:A9:FE:CF:B4:34:97
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01976929F0147795D50E66E351FB5C96B025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:45 +0000
Manifest this update: Fri 13 Jun 2025 12:00:45 +0000
Manifest next update: Sat 14 Jun 2025 12:00:45 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: gJgQorsieM3/yobjWMM4k/eiSb7uZYfnKp7IUulqG8c=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f0:14:77:95:d5:0e:66:e3:51:fb:5c:96:b0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jun 13 12:00:45 2025 GMT
Not After : Jun 14 12:00:45 2025 GMT
Subject: CN=f228cb93aeedc3029371a0713fa3a9fecfb43497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:25:eb:58:9d:c5:4a:ad:21:50:7d:4e:9d:
bb:68:c0:76:8c:92:9c:11:d2:31:88:06:c5:ec:6b:
92:7b:62:23:c6:4d:a9:4a:fa:b9:33:60:ac:07:0b:
0f:f0:c3:0d:48:44:c2:c4:51:98:cf:94:af:2c:a6:
b1:cf:fe:e3:8a:9f:cc:d2:1e:e1:16:87:e9:4b:11:
a3:e7:de:84:40:35:fb:95:d2:90:99:96:ed:7c:8d:
a0:e2:07:0c:ed:cc:35:11:34:b9:bc:2e:56:d5:91:
9a:d5:c7:72:6d:11:2c:17:3e:75:07:ab:93:7b:cb:
86:33:4e:82:d5:17:06:19:d6:c8:67:5f:b0:75:2e:
5f:ba:33:dd:a8:9b:b2:5d:22:46:1f:f3:32:9a:ad:
9b:b1:ea:38:73:4a:6e:fc:1c:00:b0:f6:b5:46:93:
2c:65:e3:11:5b:0c:54:d7:d6:80:bd:a1:dd:cf:b6:
6f:b7:6b:ce:1a:8d:f5:22:c0:eb:1e:9f:73:be:3c:
3a:85:72:03:75:fd:67:2e:49:50:30:bd:e8:37:be:
6e:14:52:5a:95:45:b6:59:88:37:24:c1:65:d1:42:
4f:24:e1:ba:13:d6:a6:64:90:79:99:87:3d:b7:5b:
e3:dd:58:47:d7:93:4f:3c:2e:a8:57:c2:a6:01:21:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:CB:93:AE:ED:C3:02:93:71:A0:71:3F:A3:A9:FE:CF:B4:34:97
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:25:b4:39:30:7a:e6:8d:b0:fd:8c:a5:62:ff:2d:60:7a:80:
b5:19:00:42:a0:e5:d0:d9:8b:bb:2f:b2:cd:41:89:ce:15:8b:
4d:5f:38:72:21:a4:8f:02:35:cd:68:82:5c:d8:fd:13:15:d3:
bf:55:c6:5a:04:40:b3:c4:cc:81:29:f5:8e:23:6f:fc:de:36:
0f:4c:a6:a9:96:b2:a5:84:32:1a:86:0b:db:c8:18:ab:47:0f:
be:e7:b8:b3:61:86:0e:b3:ac:fa:31:aa:05:c8:15:11:32:2b:
f7:1c:65:4e:24:95:6a:b6:54:4c:6a:c4:14:7d:92:f8:b9:75:
c5:10:05:8f:96:d1:58:92:ac:f6:3b:0c:6b:8d:f5:fd:b0:e5:
f8:68:05:9f:7d:b0:64:d0:a4:c3:54:5a:e2:5a:78:7b:59:3b:
83:79:6e:ae:42:72:20:82:ac:b3:79:7b:52:b9:a1:db:f3:fc:
77:90:81:9b:8e:3f:f3:80:5b:90:53:7b:62:48:25:50:a3:08:
0a:ac:d2:06:42:1c:44:d6:fb:7b:9e:48:3c:a2:a9:36:83:9f:
d5:e3:53:0a:89:05:c7:c6:42:3f:81:4e:bb:c7:80:69:b9:f2:
8e:d5:de:20:cc:d1:54:61:9d:91:c3:64:60:c4:65:12:a8:4a:
79:e7:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:40 2025 by rpki-client