Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: /TMVdYzzf3PrYzwy9O7yfRJkSoX5QyVULU0pOEPVSuE=
Subject key identifier: 52:7A:F7:C9:7D:F4:75:AF:7A:11:16:A3:4B:DC:B3:BB:9F:09:5F:B9
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 01988CFF3B5500D47A099DBCEE402A3F3B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0AB4
Signing time: Sat 09 Aug 2025 04:03:13 +0000
Manifest this update: Sat 09 Aug 2025 04:03:13 +0000
Manifest next update: Sun 10 Aug 2025 04:03:13 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: jI48pCMH50gleE3SSsAoClPd2ZVyJRrht+bmKL9nVos=)
2: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (hash: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:ff:3b:55:00:d4:7a:09:9d:bc:ee:40:2a:3f:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Aug 9 04:03:13 2025 GMT
Not After : Aug 10 04:03:13 2025 GMT
Subject: CN=527af7c97df475af7a1116a34bdcb3bb9f095fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:ee:00:a1:96:dd:d9:27:cb:ae:26:78:ee:
d4:2c:2c:e0:97:86:15:10:bc:a7:c5:2c:02:03:5c:
15:62:76:73:b2:bc:4e:bf:30:c7:6f:43:70:57:b6:
c4:99:72:8e:f1:1a:f7:1b:9e:4e:40:48:12:69:c4:
ba:cd:5b:52:44:51:f4:4a:bb:42:28:5e:df:f7:f7:
23:98:34:c8:e6:23:78:02:99:3a:d1:7f:00:c3:60:
75:c1:05:c8:52:af:39:5a:9a:96:8d:b0:6d:a2:44:
08:b9:91:bf:d2:59:7c:ef:30:c0:b8:be:7c:ea:5b:
ed:3a:b7:55:9f:0c:32:78:7d:16:9b:b3:74:58:9a:
12:88:6f:b7:ff:42:b9:56:b7:95:9b:48:6a:d5:f8:
36:df:90:21:b2:38:dd:e7:81:b5:4c:d3:b7:34:46:
db:95:f3:23:84:34:cd:c2:c2:b3:71:3a:9a:28:70:
c8:9a:a5:8e:b1:b4:97:83:86:cc:50:3f:fe:5c:cd:
33:19:09:8b:fd:c2:87:7b:33:68:11:30:a9:71:1f:
de:ac:66:85:c6:a9:30:28:39:75:16:9a:ce:c2:02:
51:2c:d6:8e:a2:14:51:cf:1e:af:ac:94:2c:a5:47:
e6:e1:f4:03:7e:bb:83:7d:f1:35:1c:76:f5:54:b4:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:F7:C9:7D:F4:75:AF:7A:11:16:A3:4B:DC:B3:BB:9F:09:5F:B9
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bd:82:f3:9a:c0:bb:c5:e3:4e:c7:ca:41:aa:d9:79:7b:d5:
c0:9d:bc:b6:56:b2:c9:61:33:79:be:81:07:5d:42:b2:5d:28:
1f:f0:25:1b:fb:65:14:58:d2:7c:d7:3c:a4:7d:13:74:34:12:
82:89:f7:4f:40:46:97:8e:13:67:90:d6:17:ad:b5:3f:0a:c1:
f6:53:a0:84:5f:e3:67:66:6e:95:3a:b8:c3:0e:b5:59:cb:5b:
d2:79:4f:d4:a4:89:59:4e:33:97:be:7e:f0:59:49:70:1a:c4:
9a:ce:23:b0:f6:be:4a:38:a6:68:b5:2d:d0:da:96:88:6b:ef:
65:1d:46:d0:d6:4f:dd:d6:17:7a:e0:ac:3b:21:91:99:de:14:
6f:a7:74:8e:42:1d:0e:b3:12:1f:a8:b1:9e:2c:a5:e9:5d:8e:
b2:9c:20:25:46:c8:06:c4:36:74:ea:18:d3:f1:39:f4:e8:d7:
95:5d:23:08:bb:ae:23:55:59:1d:a0:6c:2c:77:96:31:ba:d0:
28:3a:da:b4:53:1e:74:0e:42:50:41:32:91:93:96:6b:a7:5f:
04:1c:2c:e2:f1:e5:44:19:0b:f9:4e:63:d5:5d:19:2b:2f:e7:
28:fd:02:00:f8:b8:6e:90:01:80:13:68:f4:5d:89:b4:22:21:
2d:d8:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:02 2025 by rpki-client