Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: 02KZDqVg2+P4nNyXrmAyj57toA90u5kUrljYZbw6FLI=
Subject key identifier: 1B:67:FB:49:6F:99:F8:CD:36:4F:B3:39:CD:35:27:21:A8:88:1D:91
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 019848F7645CE22A0B519F997AE82C42A0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 094D
Signing time: Sat 26 Jul 2025 23:00:29 +0000
Manifest this update: Sat 26 Jul 2025 23:00:29 +0000
Manifest next update: Sun 27 Jul 2025 23:00:29 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: 7SjG/HDjfXzIQoHBhQ6cvgryk+1D0hM2L+owUeFNfrM=)
2: 99RaY9xH4qOYuC0KdiJQrFMbC5E.roa (hash: TZUHN/mcHmz7AzTn504QkH94CMbEPlnfBvzJqjhXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:64:5c:e2:2a:0b:51:9f:99:7a:e8:2c:42:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Jul 26 23:00:29 2025 GMT
Not After : Jul 27 23:00:29 2025 GMT
Subject: CN=1b67fb496f99f8cd364fb339cd352721a8881d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:b2:bf:ac:03:29:b1:36:f8:cb:3c:41:6d:
94:dc:61:a6:e2:12:2b:12:37:cc:02:56:87:bc:8f:
1a:93:43:d6:5d:8f:d9:e8:7f:6c:35:d9:85:95:72:
43:1a:95:cc:d3:37:e9:6e:6a:4d:28:98:15:92:5f:
92:23:9c:de:60:74:72:d9:70:71:d2:7a:af:12:de:
74:09:3a:f4:0e:9f:4c:f5:fc:ea:1d:24:9b:48:26:
77:ea:60:b0:23:36:a1:ba:28:cd:e1:d4:4c:7a:6c:
9f:13:7c:66:04:b7:57:e0:d3:75:66:47:66:78:57:
22:33:83:4f:ca:0e:54:ed:06:34:3e:04:a6:13:a4:
50:d8:01:f9:45:41:f2:3b:47:bb:ba:38:4a:2b:55:
d0:ac:f1:02:15:be:fd:fe:87:1e:24:bd:8b:7b:4c:
59:e3:b1:0b:53:7b:5f:d0:c2:7c:8e:a5:fe:21:7d:
9b:a3:6a:2f:e2:96:e5:7f:0d:7a:e6:9c:e8:d7:ae:
00:2c:30:b4:9c:2f:af:71:99:69:71:7e:9e:3d:11:
14:62:0d:4b:9c:89:4d:7d:42:98:7c:b0:d1:5c:79:
e0:9e:b4:83:6f:45:6f:48:ad:66:f8:b9:bd:1b:fa:
db:45:4d:03:97:c0:c8:6b:fe:f0:47:17:55:78:84:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:FB:49:6F:99:F8:CD:36:4F:B3:39:CD:35:27:21:A8:88:1D:91
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:71:f7:62:83:f8:79:a7:6a:54:b9:39:cc:57:57:58:68:
1b:20:11:6f:27:d1:34:0f:f1:08:e6:d5:09:ce:72:1f:78:f2:
6e:f9:30:d0:83:ca:b3:e4:42:72:44:9f:11:80:94:ec:3d:cc:
9f:97:18:01:f0:2e:ca:8e:c4:d2:55:e9:64:81:67:fa:89:fd:
63:8a:3a:0d:9d:ab:07:18:95:a9:85:ec:95:bc:ab:73:e9:18:
27:24:8f:35:a8:ca:3a:ff:31:25:9f:d2:14:1a:92:d0:ad:02:
b2:fa:c0:4f:0d:4a:0c:a6:d5:a0:4f:2d:a3:0c:18:07:66:7e:
7d:80:7a:e0:97:b2:4b:db:47:89:67:91:45:1e:8b:14:ca:92:
34:4b:9c:ee:27:ee:b6:f5:ef:29:d6:b2:62:a4:5a:50:34:bc:
a6:ee:66:07:a8:ee:dc:38:1c:d7:09:43:a4:52:1e:0b:a1:88:
a2:d8:b8:c1:1f:e7:70:6d:c2:6e:54:33:94:b8:56:d1:28:37:
e3:d3:26:a6:5c:4f:a5:56:d3:7c:8c:f4:0f:a6:e0:b9:6a:0e:
ad:98:36:97:e5:74:51:25:e8:50:7b:26:f5:53:36:31:5a:8f:
c0:76:57:f5:4d:c5:20:04:a6:8c:af:e4:75:77:98:56:dd:13:
97:8b:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:31:35 2025 by rpki-client