Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: 7+U3rikud4bDn4VlUzrLb4TEcoJQOzyqT863UtOf9aQ=
Subject key identifier: 05:9D:B0:59:14:45:49:48:19:DA:14:D7:90:80:68:4D:9A:E4:B4:2B
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 01974967E703BFAE45D0BCD3F3C5D8AD65A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0846
Signing time: Sat 07 Jun 2025 08:00:35 +0000
Manifest this update: Sat 07 Jun 2025 08:00:35 +0000
Manifest next update: Sun 08 Jun 2025 08:00:35 +0000
Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: bmPzJX8cvmh+ND4/Mor6BSbfVYL1ro6HxhYMnXyDZ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e7:03:bf:ae:45:d0:bc:d3:f3:c5:d8:ad:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Jun 7 08:00:35 2025 GMT
Not After : Jun 8 08:00:35 2025 GMT
Subject: CN=059db0591445494819da14d79080684d9ae4b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:6e:37:4c:cf:3c:7b:56:9a:cb:cb:2d:ab:
1e:08:dc:d7:f3:cd:a5:f7:23:1e:59:67:05:71:81:
bf:28:f2:38:78:9f:5e:9f:2a:02:91:0d:1a:4f:1c:
ef:6d:0d:fa:06:10:1f:48:bd:ca:03:33:d0:ab:df:
ec:a0:e5:23:e0:a2:9f:8f:b6:03:43:27:be:6d:5f:
5c:0d:03:87:65:ed:7f:1e:91:3a:74:65:c5:d8:f3:
3b:45:3c:b0:de:42:a8:2a:18:8b:c9:6e:a5:96:3e:
24:82:7e:bf:04:d7:19:3b:8f:35:0e:24:6e:dc:4c:
5e:57:61:7c:92:05:6c:14:ab:b8:dd:30:44:9e:79:
26:2a:8b:df:f4:59:37:5d:74:18:7b:94:0e:19:97:
24:4e:af:4c:d6:38:c9:16:bb:24:52:65:21:97:a5:
af:2e:74:c3:e9:e2:87:d9:88:26:1a:88:44:6d:0c:
d5:6f:06:69:b9:ff:42:be:8d:96:5e:e3:0e:0b:e5:
f7:a4:fe:6f:87:ee:45:2d:e2:af:93:ea:4b:bb:6a:
8b:34:72:da:f3:ae:9d:c7:49:ec:06:c7:fa:7e:08:
f7:9d:4e:36:ef:a6:a6:26:e2:01:22:9f:23:24:db:
09:b7:84:51:7f:36:15:96:86:aa:bf:c8:53:71:d7:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:B0:59:14:45:49:48:19:DA:14:D7:90:80:68:4D:9A:E4:B4:2B
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:85:6c:5c:59:ed:da:a1:f1:d0:8d:d2:c2:87:c3:2c:11:8b:
4c:d1:57:2c:7c:04:0d:3b:4f:fc:89:2e:2d:40:c4:3c:00:9b:
64:06:d7:22:dc:1e:87:94:7c:c4:04:b5:98:74:ee:46:f6:47:
1a:9d:31:e1:88:19:d2:05:97:06:76:cc:54:48:b6:f8:72:0e:
73:00:49:ae:45:06:34:0d:2c:1a:16:fa:12:ef:3e:79:be:9d:
6b:a2:00:f4:36:4b:f8:82:f3:25:43:dd:f5:d3:4e:83:01:0e:
09:7d:fa:c0:ca:69:10:d2:a9:40:00:b8:23:6f:3b:6a:d6:6e:
29:e7:c5:3e:58:b3:34:7f:90:37:b7:a2:b4:b8:f8:d3:22:50:
ba:8a:42:38:57:2b:24:6a:bc:42:42:6c:01:0c:1c:54:60:0d:
45:68:7f:38:39:1f:c1:87:30:53:6c:18:ab:45:a4:90:d9:7e:
95:59:6e:01:bb:ad:82:53:b3:eb:e8:4a:15:e5:73:59:c8:5f:
82:8b:02:a6:f4:63:35:74:aa:3d:b3:d3:a4:69:b7:f3:11:2a:
40:33:33:47:72:9b:2e:73:5d:30:29:72:1e:85:6c:aa:c3:59:
0c:2f:f4:be:62:5e:e9:24:d0:53:ce:66:fc:4a:7e:99:c9:5c:
94:49:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:13 2025 by rpki-client