Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: 7JOlXletMwOM1pd6LK8OZ9BxLQZE9XEQh/diHzmXLK4=
Subject key identifier: 1F:B9:E4:54:74:21:C1:95:26:95:C4:6A:28:BE:88:D7:A8:0C:A0:34
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019751587DEA8A7CA980982110D8F5A0F994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0C76
Signing time: Sun 08 Jun 2025 21:00:43 +0000
Manifest this update: Sun 08 Jun 2025 21:00:43 +0000
Manifest next update: Mon 09 Jun 2025 21:00:43 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: nhFHhg02MUT1HrZMCdYF/3J4AXA0o18l3dmJyoW95Bw=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:7d:ea:8a:7c:a9:80:98:21:10:d8:f5:a0:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Jun 8 21:00:43 2025 GMT
Not After : Jun 9 21:00:43 2025 GMT
Subject: CN=1fb9e4547421c1952695c46a28be88d7a80ca034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:32:94:02:61:5f:9b:85:62:5d:a6:ee:a6:
71:40:d6:a5:e2:86:ad:e2:ad:5b:d3:89:00:d8:02:
20:9a:82:f5:71:b8:c9:bd:d0:80:46:bf:6a:4f:53:
b4:e1:ab:d1:36:28:68:1f:58:c3:a4:7d:20:24:0a:
99:cf:a3:2c:cd:6c:9f:06:51:57:7f:a7:09:0f:4f:
b8:d3:7d:cb:9c:48:b8:97:05:73:95:39:ea:a3:57:
dd:6d:a2:c3:38:41:8e:b5:e1:dd:ae:9c:31:26:36:
74:27:a9:0a:9f:59:62:2f:21:8d:e6:a1:d7:b4:4e:
80:73:a4:94:55:73:f3:87:a1:1c:bb:a7:e1:0d:f7:
83:21:e1:d9:49:32:d8:71:64:38:c0:88:ad:db:5d:
81:56:fa:8d:fc:f4:0f:db:71:80:59:09:a8:24:ff:
f6:c1:ad:20:09:55:b9:84:33:32:98:b6:ee:da:26:
05:45:f6:0e:5b:20:5e:ac:5b:e8:15:ea:31:97:e5:
c9:46:17:78:5c:70:64:81:c4:ca:89:16:16:25:41:
70:70:5b:61:63:f7:81:0b:4a:d2:8c:76:63:cf:0c:
51:3d:16:53:2d:a2:a6:0a:b1:11:05:a4:2e:51:83:
25:d4:6f:39:c1:65:db:f0:01:9b:b3:aa:96:5e:d5:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:E4:54:74:21:C1:95:26:95:C4:6A:28:BE:88:D7:A8:0C:A0:34
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:1c:d7:cb:0b:31:fb:ae:cc:0c:2e:2b:f9:d7:5e:52:80:
1f:9d:a7:1e:20:ed:86:8a:23:26:63:ce:26:ed:22:46:3c:5d:
d0:67:c6:33:38:59:4c:eb:32:3d:12:fc:c8:0e:ef:59:47:95:
98:71:27:d3:26:67:e0:16:88:30:ac:12:34:07:c6:e9:c1:3d:
36:df:ce:86:8e:af:33:3a:d0:e4:36:65:ba:67:44:33:13:2e:
d7:53:28:f2:11:cb:3f:78:2f:6a:d4:86:0a:37:1a:0e:f6:d0:
fd:ef:db:30:db:f4:a6:ee:bc:62:a2:de:94:00:f1:3d:70:e4:
81:a2:82:62:39:0b:a6:ac:de:5e:cf:0a:fc:51:bd:54:63:ac:
ef:dd:06:25:d3:7f:57:50:8c:37:5e:de:14:61:9c:0a:09:48:
96:72:02:72:05:b1:62:e5:e2:f4:8f:23:fc:4f:16:63:a6:d1:
ec:04:65:25:ff:c2:18:3b:ef:d3:6f:10:8e:68:e8:c0:88:32:
d0:51:bf:c2:4e:2a:c7:e2:d6:d0:af:bb:51:ce:56:c4:b0:bc:
1e:c2:e9:01:c0:d1:9c:8c:5a:cf:26:45:e8:25:0d:f8:07:0d:
96:9e:7c:5a:b7:fe:42:7c:4c:1f:d8:8a:01:d1:c0:f5:b5:42:
e7:1e:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:43 2025 by rpki-client