Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: JSDeguoUZ78Vl5+4VlPYEEKHDwPqvIz9LdC1jW57vXg=
Subject key identifier: 4F:8B:A7:3A:F8:CB:8E:3E:0D:3E:F3:3D:D5:79:AA:09:D4:1B:D2:7E
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 0197458BA13290791799941FD6D1D27E34BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 150E
Signing time: Fri 06 Jun 2025 14:01:07 +0000
Manifest this update: Fri 06 Jun 2025 14:01:07 +0000
Manifest next update: Sat 07 Jun 2025 14:01:07 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: EMdKSdkQ7QCelHJltsedQ1c1GlwKw1jC5asgGr0Mz7Y=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:a1:32:90:79:17:99:94:1f:d6:d1:d2:7e:34:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jun 6 14:01:07 2025 GMT
Not After : Jun 7 14:01:07 2025 GMT
Subject: CN=4f8ba73af8cb8e3e0d3ef33dd579aa09d41bd27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:df:d6:f4:ab:b2:8f:a3:7a:1c:d2:fc:86:
79:cf:23:04:05:57:ec:e8:8f:ac:b7:c1:f4:b4:03:
97:03:98:ad:41:65:21:ba:52:67:d9:f1:32:de:93:
06:7b:fb:de:76:82:ba:eb:60:43:1e:0a:7a:a4:0b:
23:0f:3b:8a:64:05:72:b0:5f:d2:8d:d4:34:a5:86:
1a:77:dc:1e:45:cf:3c:0d:a8:34:3d:18:80:05:59:
dc:94:85:5f:dc:25:59:9d:5d:6f:19:95:63:f0:9a:
88:ee:f0:1a:35:ff:d3:d4:e8:5a:11:96:3c:9c:0a:
90:90:14:fa:08:4a:52:e6:b8:ca:b4:dd:9f:21:86:
d5:93:76:b1:5b:34:87:e3:e3:70:e4:b0:7f:20:d6:
ef:0e:e7:99:d9:ee:91:be:89:a3:15:f8:40:11:a2:
6a:85:8a:9e:73:c0:a6:f8:86:cc:5c:4d:29:2f:9e:
db:76:e7:34:a5:53:85:d5:bd:8b:6f:58:4e:8e:29:
69:aa:7c:48:c4:3c:76:30:52:9c:be:e4:22:50:61:
14:36:aa:55:0f:b3:dd:6a:64:22:70:a4:47:b5:61:
93:95:48:f6:e1:f1:84:9c:26:73:ca:2b:ec:fc:b5:
b3:a3:e1:cf:c1:d9:5a:b3:35:8a:6b:d9:d7:d4:4c:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:A7:3A:F8:CB:8E:3E:0D:3E:F3:3D:D5:79:AA:09:D4:1B:D2:7E
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:35:31:e0:e3:26:2d:37:4a:49:64:3a:cd:f4:cd:66:52:
bb:f9:23:05:c0:b1:64:b1:93:d5:41:99:1f:6d:bc:1f:c5:80:
c6:57:0e:da:d2:d3:27:1e:43:3e:18:6f:91:f9:c1:44:72:f4:
11:db:80:5c:36:8a:14:cc:05:7e:43:2d:db:3f:c0:e8:ff:0f:
a3:08:2e:59:75:63:d2:42:18:f8:49:8d:a9:e0:83:ee:ed:8a:
87:cc:fa:e4:7b:c6:2d:50:88:c1:7a:f6:80:3e:4e:9c:e3:dc:
c5:e4:a5:11:5a:61:bf:91:b2:7e:03:40:c3:36:82:d2:73:c2:
3b:65:43:5a:b4:ff:88:bb:53:2a:49:ee:fd:61:8f:fe:39:99:
87:15:08:62:b6:a9:f3:31:b9:c6:d5:99:ea:3e:a6:33:22:77:
5c:21:c2:b1:24:7f:e1:f8:7a:53:09:cb:d7:db:55:a5:4b:93:
a2:b4:85:d5:77:82:dd:d6:9a:5c:b8:dc:63:ce:34:c4:e6:00:
94:b1:ca:fa:3a:b6:1f:81:7d:08:50:97:d1:e5:fb:1d:86:00:
01:a3:c7:46:60:9b:62:d9:37:18:89:8b:f6:1e:ab:05:c2:14:
ea:f5:77:c9:67:d3:94:93:6a:a5:f1:0c:8c:f2:59:b8:38:0c:
be:3f:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:15 2025 by rpki-client