Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: GKJHrJQChaq1AyZaDAk3torcmzuJZfY87+5YdXK7Zqo=
Subject key identifier: 38:0D:86:3A:1B:07:65:31:11:48:71:4F:BA:F8:9D:FF:CC:9B:16:86
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01984664837F71D5140725974FAC98D297CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1593
Signing time: Sat 26 Jul 2025 11:00:49 +0000
Manifest this update: Sat 26 Jul 2025 11:00:49 +0000
Manifest next update: Sun 27 Jul 2025 11:00:49 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: uHzw5C7g29uvOtVaZxUPdk6VxtHsdZq87JPU0BaNVb4=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:83:7f:71:d5:14:07:25:97:4f:ac:98:d2:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jul 26 11:00:49 2025 GMT
Not After : Jul 27 11:00:49 2025 GMT
Subject: CN=380d863a1b0765311148714fbaf89dffcc9b1686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:d3:0a:76:89:b5:f9:c9:a0:ff:54:e3:98:
0e:0f:df:b0:b9:fd:d0:15:f6:d9:1f:b6:48:9e:6e:
50:7b:b7:14:5a:9c:02:63:55:3c:55:b6:35:20:25:
78:37:5f:fc:3d:1f:86:5a:8d:4a:8b:8b:07:ba:c0:
fe:8d:44:71:f0:eb:1f:f5:05:90:66:4c:2f:30:7f:
29:e5:b9:f3:94:7a:89:c3:f2:fa:6f:e5:b0:fa:79:
07:85:1f:ad:df:6e:88:fb:36:01:27:95:49:fe:bd:
e3:ad:25:4f:aa:94:5f:5b:d7:ef:22:1f:c7:2f:e7:
5b:ef:1e:2e:d1:dc:c8:48:bd:a5:13:fa:31:72:cf:
ab:c4:c3:59:53:6f:0a:d4:9c:3c:fe:01:40:3c:ee:
c5:5d:1b:22:84:39:36:b7:90:d2:b2:c8:e3:5e:35:
58:31:67:8f:d1:a2:34:d0:c0:1f:09:b3:04:4e:3a:
2d:ea:cc:d8:6a:6c:63:e4:7c:20:4d:fc:7b:6c:04:
28:cd:6e:9d:62:0c:86:83:55:e2:19:5a:48:f1:7c:
44:29:32:80:81:55:9d:88:e4:4a:9a:38:31:01:99:
61:a4:cc:d7:0f:7f:f4:1a:ef:83:5c:c0:7a:d6:cc:
b5:9a:f7:8f:40:08:18:b3:7c:04:19:05:7b:e0:30:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0D:86:3A:1B:07:65:31:11:48:71:4F:BA:F8:9D:FF:CC:9B:16:86
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d3:5a:c9:fc:e8:41:15:23:8e:f4:66:7b:e3:02:7a:68:81:
2a:2b:3a:d0:00:64:a3:42:3d:5a:1a:65:67:e0:ac:1e:31:c5:
d9:7a:19:6d:4f:6b:6c:1f:6f:e6:e6:3e:3e:12:bd:1f:5f:fc:
82:15:db:8c:d9:07:ba:74:53:89:ed:52:a2:7c:67:d1:72:8e:
fd:d0:27:ac:37:c5:bb:9f:6a:bb:64:0f:10:4c:08:49:ce:fa:
34:32:68:0a:42:8d:3a:c6:37:bb:07:34:04:3c:00:cb:ec:6a:
1c:61:67:71:7c:a7:60:c5:fc:6f:ec:db:e6:4d:46:65:c2:d2:
2d:de:78:6f:65:dd:af:fe:14:19:5e:f0:84:04:fd:8f:80:eb:
28:b4:b4:3a:e5:81:6b:16:15:b5:36:07:3d:53:4b:31:df:b4:
15:ee:b3:f9:c2:a0:92:0a:aa:dd:57:7d:99:f4:ca:a3:2c:8b:
c5:85:04:f0:9e:66:40:b5:66:4f:a6:4e:76:b1:e4:52:8d:3c:
1c:33:cd:11:3f:ba:05:66:11:6d:e1:9f:c1:18:a5:99:b3:e8:
bf:3d:05:d9:32:fc:16:f2:f8:66:15:76:bd:9a:e3:7b:f7:1e:
44:0d:6f:55:de:09:6d:ac:8f:2e:3f:bb:16:32:77:fe:59:d9:
22:3e:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:42:50 2025 by rpki-client