Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: ju6cenOj6S/lnNXvxUZSPHGac3z/b+VpZQclQUWCaa4=
Subject key identifier: AF:9F:C5:44:95:6F:39:FB:EE:9C:61:6A:0C:9B:8B:58:A5:F6:11:71
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 0197496834F5905A4E8F67775EE5FCD67B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 04FF
Signing time: Sat 07 Jun 2025 08:00:55 +0000
Manifest this update: Sat 07 Jun 2025 08:00:55 +0000
Manifest next update: Sun 08 Jun 2025 08:00:55 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: yBI/qasD9wLeimjs7k7wS7dDuFzkepjndINhKvxP/ss=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:34:f5:90:5a:4e:8f:67:77:5e:e5:fc:d6:7b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Jun 7 08:00:55 2025 GMT
Not After : Jun 8 08:00:55 2025 GMT
Subject: CN=af9fc544956f39fbee9c616a0c9b8b58a5f61171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:2d:e2:f3:9b:d0:d6:ab:85:b7:c1:9e:86:
1e:ba:20:cd:2a:c5:37:99:66:dc:ba:e6:ce:b1:b0:
93:a1:38:62:f1:c3:00:91:49:8f:ba:b2:72:0a:f5:
02:4b:bb:29:3a:6d:37:20:80:32:bd:d0:a2:b9:17:
05:d9:71:55:56:6d:ec:08:f4:0f:eb:47:6a:c1:0d:
a0:e6:3a:89:e6:58:18:f4:fa:43:40:30:3e:58:85:
ce:23:9a:01:88:c6:32:89:50:0a:73:5d:b6:9b:10:
fe:1b:4b:4b:36:f2:a3:73:88:25:b5:35:c3:a4:bc:
97:3e:ea:be:15:45:24:d0:96:ef:56:b8:ab:0a:34:
6d:ac:5b:eb:cb:51:3a:96:49:09:43:38:13:bc:7a:
63:bb:d1:8a:2e:4d:d0:9d:cf:75:b4:f3:ce:74:73:
02:70:98:94:44:f4:58:7c:31:c9:78:46:ac:f4:8e:
5e:58:32:bc:38:0d:d7:9f:02:ad:fd:67:ad:b7:62:
29:fa:50:70:33:7b:cc:72:07:a1:8c:3a:4a:82:df:
ef:ee:01:ef:f9:a7:b4:0b:c6:d8:ef:ca:fc:a5:22:
fc:9e:75:6d:cf:95:dd:41:7e:fb:b3:73:68:6f:f0:
38:97:de:30:26:10:7b:a1:db:ae:b0:2a:79:5f:8b:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:C5:44:95:6F:39:FB:EE:9C:61:6A:0C:9B:8B:58:A5:F6:11:71
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b6:a2:c7:a5:ea:79:e7:65:2c:25:52:ac:1c:a7:e9:d8:42:
63:fb:4b:35:ba:b9:c7:96:fd:bd:6c:b1:54:a4:f0:cb:c0:36:
3e:e6:b1:c4:6a:8b:f9:3a:20:a4:49:dc:10:6f:93:c0:1a:a2:
13:b1:66:c6:72:cb:82:cf:e5:f1:fb:37:3e:75:0b:7b:8d:14:
c3:5e:38:20:33:84:cb:8f:66:0b:96:cc:67:87:d5:1f:5a:3b:
78:d4:02:e8:0b:47:8b:5f:8e:33:16:74:33:b4:f9:4d:ca:de:
5e:12:f3:56:97:18:55:52:0f:f9:e3:1e:f3:d7:ee:91:a2:f5:
71:2e:88:a4:44:bb:00:26:d9:3d:14:e0:1b:af:48:5b:7c:60:
63:4c:28:cd:29:7c:6b:d5:ce:56:3c:27:56:e3:20:c4:b9:d3:
dc:ac:04:41:68:4b:c1:03:f6:bf:59:e1:d2:f0:11:b1:5b:fe:
80:1c:6c:6c:83:f0:fe:5a:54:eb:88:e0:b5:f6:97:f4:e0:57:
5b:c6:17:34:21:c8:72:4f:64:1f:b0:88:5d:0f:39:39:98:b8:
6b:ab:c2:8a:58:87:13:9a:c8:16:e1:7f:8b:a9:50:17:8b:19:
14:93:40:58:1c:af:70:5f:d1:d8:31:50:4a:c5:fd:d6:65:28:
3f:51:48:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:16 2025 by rpki-client