Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: xBpFylH3FBK9Mpw20GjJqJ3ytRHGy8ekYjXFx077FkM=
Subject key identifier: 98:78:1D:CC:D8:87:84:B6:0D:31:9B:5D:0C:F0:7F:5C:78:E4:65:1E
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019749686777148915302DA073E34A8FD222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 13FD
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: xs6vX1HCac6mKo7+XL2KFEI2VhiYQHnJanhAGpNv6Eo=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:67:77:14:89:15:30:2d:a0:73:e3:4a:8f:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=98781dccd88784b60d319b5d0cf07f5c78e4651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:b0:65:ce:a3:24:a6:88:91:8c:89:e1:a8:
9a:4f:6f:51:92:17:4d:36:83:a3:e3:cc:41:f3:7b:
66:a3:94:e6:01:b4:46:21:69:bf:ab:e1:6e:83:67:
57:43:23:ed:f7:12:7b:e6:76:84:d2:f9:17:96:e3:
66:e6:d1:d0:3f:9e:45:3b:63:92:ce:79:87:7d:9f:
a5:df:b6:2c:e6:c5:ec:10:f9:41:22:f8:f4:dd:4e:
8e:b0:8f:38:4d:38:d7:f8:e5:0f:fa:78:5f:c6:d6:
f2:56:5c:f9:99:df:d4:27:ae:5c:8f:e5:5c:22:1a:
2e:ef:12:7d:08:77:3a:19:4e:4d:a7:62:80:1d:e2:
f3:95:9d:6c:7c:36:43:b3:48:f9:11:52:0e:ea:08:
57:6c:18:c2:d0:a4:f6:d4:ff:e9:7d:ea:85:7d:d6:
7b:45:25:d7:88:99:bf:b5:2d:5e:b8:39:ba:c5:53:
d7:7c:ff:b6:5c:99:f7:e8:9a:df:80:f3:a5:9a:6f:
b6:53:4e:b0:77:f5:c1:60:cd:c8:f5:e5:12:de:d8:
1c:4c:f8:ca:a7:2d:22:cf:45:ca:44:52:79:21:39:
e5:14:7f:62:f7:21:f3:23:16:df:73:1d:8b:f3:27:
3c:84:60:7c:5b:45:29:9c:0b:1c:54:24:8c:4b:30:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:1D:CC:D8:87:84:B6:0D:31:9B:5D:0C:F0:7F:5C:78:E4:65:1E
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:83:0f:98:ab:97:ed:80:c7:7b:17:a2:05:c0:fe:ab:4c:2a:
1b:47:c6:fb:1a:fb:71:e3:07:b0:c2:2a:f3:bf:9c:71:d8:85:
06:b8:50:9a:44:f8:30:c2:ab:b5:12:9d:6a:00:bb:dc:5b:62:
a7:39:f7:3f:50:4e:c2:b8:bd:f2:f7:30:17:16:08:49:c8:aa:
8b:b2:b5:ff:ad:a4:3b:79:4c:c1:e3:39:7d:4d:14:e6:57:f9:
6e:7e:52:8b:b2:36:c2:4c:34:34:cb:d9:9a:39:70:ba:94:07:
66:e1:27:d2:65:b1:d4:b9:98:bf:b7:0f:8a:a7:84:3d:87:9a:
04:b8:97:da:05:34:bd:f9:1d:c3:9a:d2:ba:30:e2:06:0d:c3:
86:0c:15:46:aa:b7:19:b2:e0:ef:2b:39:59:86:f0:0a:6d:37:
97:eb:0a:0f:38:8f:c8:6d:b4:2c:62:68:e0:6b:cb:13:ba:5f:
71:42:bf:a7:e9:14:6a:d3:2d:ed:49:88:5b:d7:ae:a6:84:8d:
90:4e:4a:96:0e:1f:8c:30:52:07:9c:2e:14:b0:94:46:cc:45:
b7:2a:80:47:d1:5d:c8:eb:a4:a5:b4:44:98:0a:5a:21:87:1f:
2b:be:90:70:98:f1:2b:8a:00:67:ca:31:6c:8b:f8:c4:5d:2a:
02:62:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:22 2025 by rpki-client