Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: Tyf2GzOnmTxpxEaMlTx4DTrfi2kKKEVH7pDJ9AbwFA0=
Subject key identifier: CA:7E:3D:91:76:D4:0E:DE:49:F4:4E:DF:2B:EB:1E:9F:DF:A4:A7:E9
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 01976DAB25DD375F6095294896B317F446DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1312
Signing time: Sat 14 Jun 2025 09:00:22 +0000
Manifest this update: Sat 14 Jun 2025 09:00:22 +0000
Manifest next update: Sun 15 Jun 2025 09:00:22 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: R0oFrettxn65XQ4y0HCpaVDicFyWTXkYfNj0sT2mwPc=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:25:dd:37:5f:60:95:29:48:96:b3:17:f4:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jun 14 09:00:22 2025 GMT
Not After : Jun 15 09:00:22 2025 GMT
Subject: CN=ca7e3d9176d40ede49f44edf2beb1e9fdfa4a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:13:74:fc:c7:b0:a5:93:94:08:fc:8b:44:
a7:8e:85:ce:e1:ec:1c:69:7e:3d:6a:c7:d2:81:d2:
7b:50:f8:c0:eb:07:53:2a:f0:83:92:04:ff:37:80:
bd:0e:89:42:6b:b9:ba:e2:34:5a:93:4c:11:34:c0:
3e:ee:aa:d8:0b:7d:ea:5e:c3:f6:26:33:36:06:d2:
68:88:c1:a3:20:bd:f3:23:b6:e3:31:94:50:99:0b:
79:24:00:64:84:26:dc:fe:d1:a4:26:df:67:9b:9a:
8f:7c:8e:34:64:46:f7:2c:19:a9:c4:ae:e3:17:5e:
0a:99:6f:e2:d0:0c:1a:69:91:31:6d:20:d5:69:f9:
49:b9:c9:2a:30:ad:7d:49:bd:a3:d6:36:24:9d:f6:
39:45:8f:45:8c:22:f6:ab:a6:c5:de:6e:f0:eb:7b:
9f:76:42:5c:29:21:c3:40:53:1d:9e:7d:e7:89:bf:
d4:71:53:96:3d:c4:90:2b:d2:f5:a0:45:3f:db:be:
62:98:37:f8:1a:dd:8c:e7:54:89:ec:dd:f6:70:5e:
c0:a9:7f:54:c5:62:a1:73:a8:64:5b:fa:9b:df:b8:
c3:ff:17:e1:fc:77:b6:c9:ed:09:08:57:f4:4c:41:
60:e7:3a:c8:bf:71:9a:cd:06:4d:44:35:6e:ce:0b:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:3D:91:76:D4:0E:DE:49:F4:4E:DF:2B:EB:1E:9F:DF:A4:A7:E9
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:72:16:01:0b:ea:69:5d:16:c2:4e:a4:60:9d:cb:ec:0f:5f:
bc:6f:9d:0a:4a:b0:b7:79:e5:aa:cf:eb:15:ec:20:4f:cd:16:
bf:5c:7a:07:ea:a5:44:57:ed:c0:59:0a:73:cd:e4:6e:06:dd:
23:c5:82:87:56:47:72:e2:50:9d:1c:f3:6d:05:1c:84:fa:6e:
04:a8:f9:46:12:0d:32:1c:6c:3d:63:1c:56:0f:57:e0:ec:06:
a1:e3:0c:cb:75:db:35:20:7b:39:36:55:10:38:f3:d1:7b:da:
61:40:5f:ef:7d:68:e0:db:d4:3d:96:c5:8c:86:f8:c1:13:38:
46:56:26:ae:08:c2:1c:b1:b7:f1:a9:d8:d8:28:fc:a8:66:eb:
ef:f4:e5:13:8a:ed:35:7b:86:ea:0c:b3:f5:11:b6:6a:b0:2d:
89:03:e3:5b:a5:47:83:4e:cc:b2:16:0b:9d:ec:74:a5:fe:b3:
2d:bf:e7:64:e7:57:e0:45:b3:34:3e:f3:b6:1d:ab:8b:84:9d:
26:a2:a7:c4:e5:3a:23:b9:f4:9f:29:49:b6:c1:17:a4:f0:c2:
2d:69:7d:6a:cb:1f:e4:7a:dd:f7:34:88:a1:50:5e:96:64:32:
25:21:17:d1:d0:46:09:ca:c4:f9:b0:a3:71:f7:ff:f1:ba:68:
1e:42:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:39 2025 by rpki-client