Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: mO+9/g2YG/8HEtvMD7pyOQhV5QFviGEpLH/JtD6ExUI=
Subject key identifier: BC:DA:2D:91:B4:CE:30:E4:05:DE:9A:B6:2F:23:FA:9F:A1:3D:E4:B6
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01974742D9DB7E35B67752499A7DACA1E113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0DA9
Signing time: Fri 06 Jun 2025 22:00:52 +0000
Manifest this update: Fri 06 Jun 2025 22:00:52 +0000
Manifest next update: Sat 07 Jun 2025 22:00:52 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: oSW5fuBEYa3FM6Y82ebeM9MACxuZeTD+Q0Z32NZTyHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:d9:db:7e:35:b6:77:52:49:9a:7d:ac:a1:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jun 6 22:00:52 2025 GMT
Not After : Jun 7 22:00:52 2025 GMT
Subject: CN=bcda2d91b4ce30e405de9ab62f23fa9fa13de4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:c1:c4:6c:63:b0:15:9c:99:be:9a:16:77:
97:8f:86:07:10:b3:f1:1e:c6:4a:22:4d:ae:fb:2f:
36:62:95:de:0a:90:66:6a:bc:e2:8b:5d:c9:54:ea:
22:7b:65:1e:b4:e7:46:e2:4f:2e:e1:9c:27:05:16:
9c:d4:6c:93:8d:88:a0:f4:b1:a5:c8:b2:00:a7:18:
1e:42:e7:02:75:6d:8e:30:d7:54:7c:52:9b:1b:bd:
94:f7:a7:4b:78:94:04:b9:0a:97:bc:32:bc:c9:da:
81:d4:a3:41:18:12:b7:db:d9:d6:36:f2:83:1e:70:
51:8f:fe:8b:72:88:1c:52:53:8b:a6:db:34:3c:16:
d4:bf:f2:66:db:21:6c:36:84:ae:d3:24:29:b7:d0:
b3:33:bf:97:2d:d2:0a:bf:8a:56:4f:5c:da:5a:ab:
4f:8d:6e:ac:5e:e0:52:ee:2f:25:cb:5c:84:b4:51:
25:b8:a5:1d:60:18:10:7e:ef:01:c0:38:b1:41:2a:
f1:ca:0d:b3:b2:61:4c:a6:b2:26:21:43:95:06:ad:
cd:30:16:4b:ce:fd:31:1f:92:6e:e5:c7:b4:31:35:
00:7d:b7:27:38:88:e5:e3:ca:70:9e:7a:bf:e9:36:
0e:9a:30:cd:b2:6e:86:67:30:5a:04:bb:1b:e9:55:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:2D:91:B4:CE:30:E4:05:DE:9A:B6:2F:23:FA:9F:A1:3D:E4:B6
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:71:20:e5:6a:45:ab:de:64:1d:e0:46:b6:81:00:08:12:5d:
f7:3b:89:55:70:f4:29:d9:73:3c:0f:32:cd:57:6e:2e:7f:e2:
82:75:b6:54:4a:80:8e:ee:69:bc:33:a6:be:5b:01:49:98:cf:
37:c4:a4:61:04:41:60:b6:47:3e:3c:9f:a9:26:88:40:18:f7:
97:58:67:e9:f0:64:b1:07:42:e4:1e:3d:53:c3:1d:e4:64:55:
10:38:34:fe:f1:a7:21:c5:d8:26:7c:1f:91:5f:79:fd:88:ff:
31:92:65:24:3e:1b:c4:27:cf:1d:7f:dc:28:3e:8f:63:a2:1b:
7e:45:40:4b:c1:29:9d:cd:22:53:07:8a:61:02:21:74:d4:12:
69:d6:31:c6:fa:61:16:94:ac:c5:14:3e:80:20:fd:0d:c6:3c:
91:d8:ee:07:90:67:e3:1d:55:3b:9f:cb:28:bc:84:5e:44:39:
0b:9b:ae:97:4c:64:75:75:5f:bb:91:52:a5:95:6c:ca:bd:bf:
d7:c0:a2:14:f2:54:11:15:6a:5a:57:6d:4b:24:05:f0:9d:db:
25:0d:99:0c:3a:ff:03:48:19:a3:12:a2:7d:de:79:ec:3b:da:
77:5d:3b:cd:df:29:b5:0e:e3:13:2b:2c:13:d8:73:3d:c2:f8:
3d:36:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:41:42 2025 by rpki-client