Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: g/Fe3ixRuSvRo+h7ah+ElZQFs76+C90c8PT04lkx3mQ=
Subject key identifier: F4:67:42:C4:8C:21:70:A9:42:28:77:4C:27:DD:DD:9B:96:01:66:0C
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 0198477875692B7F9D552EB56455CF8D8FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0A90
Signing time: Sat 26 Jul 2025 16:02:13 +0000
Manifest this update: Sat 26 Jul 2025 16:02:13 +0000
Manifest next update: Sun 27 Jul 2025 16:02:13 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: 2XFMZvdBRxcuynEaun1E8RgeUNFL9zlw01Q5XgI2psk=)
2: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (hash: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:75:69:2b:7f:9d:55:2e:b5:64:55:cf:8d:8f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Jul 26 16:02:13 2025 GMT
Not After : Jul 27 16:02:13 2025 GMT
Subject: CN=f46742c48c2170a94228774c27dddd9b9601660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:76:4a:eb:cc:cc:c1:ac:42:d3:e6:1b:68:
ff:8a:a7:03:5d:ce:79:bb:32:80:1a:79:9e:cf:4d:
04:2e:f5:e6:4b:35:02:dd:15:c5:03:dd:06:32:a2:
d8:87:41:35:78:ba:23:6b:e9:40:e7:e7:a2:82:93:
ad:83:6f:42:05:e8:4d:30:2c:5a:26:b9:be:b0:5d:
59:c6:26:b1:1e:ad:d0:3c:56:04:2f:b5:f2:21:dc:
0b:fd:3e:ef:fd:1c:e2:51:fe:8f:53:2a:a6:43:6f:
7c:ad:3c:11:c4:ad:01:ba:a6:26:a6:6d:2c:ac:88:
fb:2b:1e:d5:f6:e8:42:6e:a0:98:8c:47:4d:3d:8d:
ed:ce:e0:86:cf:d8:d5:28:93:50:cb:14:b3:47:af:
54:af:cd:37:c9:68:5c:30:ee:64:ea:8e:2c:70:ba:
23:a9:64:3c:5c:8f:26:1f:11:f3:64:e5:90:75:36:
d7:a6:0b:d0:67:9b:38:a5:69:ae:b7:85:df:9e:a0:
36:df:ed:16:73:10:68:95:3f:30:5e:34:65:75:37:
4e:be:1c:c1:2f:8a:20:d4:b7:1f:1c:11:c4:7d:41:
9d:28:7c:d2:5f:21:b4:c0:61:d6:93:9b:f5:8d:c7:
0b:6a:71:d9:9e:fd:a6:6d:e1:ca:bb:2a:e7:8e:da:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:67:42:C4:8C:21:70:A9:42:28:77:4C:27:DD:DD:9B:96:01:66:0C
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c0:93:a3:43:f2:3d:fa:a6:14:a8:73:e6:35:ac:67:60:ea:
f4:29:02:a8:8d:7b:f6:58:68:ae:df:61:26:54:06:1b:e7:82:
8e:cc:29:52:c5:70:21:d5:cc:8f:fb:91:41:dc:0f:27:66:ad:
c9:2a:c2:41:19:57:af:5b:a2:6f:a2:ca:ef:ed:87:53:7d:3e:
b8:26:fd:8c:f2:b3:71:f3:de:9b:04:0f:6f:03:22:32:b7:66:
c3:28:50:2c:e9:4d:bd:62:dc:72:07:73:7a:4e:46:1a:e1:46:
c2:f2:c7:22:1e:7c:d7:ab:0e:55:b4:bd:59:c4:1b:35:2e:d9:
ac:ce:a0:1e:7e:fa:e4:c5:d5:71:2e:e2:0b:5f:4d:f3:b5:92:
2e:c8:89:ee:3d:c7:d6:2f:55:fb:c9:4d:19:12:97:fd:ef:61:
57:e7:a2:ed:00:b2:d6:7b:cb:d0:52:fe:9d:19:a3:1d:1e:ff:
1b:38:38:f3:7b:87:a9:d8:38:71:c1:a2:c9:76:79:8c:6e:9e:
1c:80:3f:1a:45:a8:ad:a2:20:48:f4:ad:bf:e9:d0:9e:33:3e:
f6:5c:dd:d7:cf:8b:91:31:1c:4d:4e:a6:57:c7:6b:fb:1a:eb:
f7:99:1c:3c:8a:cc:27:a7:7b:aa:21:e0:30:60:bb:ad:ec:aa:
6a:b7:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:12 2025 by rpki-client