Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: MiMIH4lF+1Cb+a4NIhKgPv3qg4Cr75NdIAftPGh7YGo=
Subject key identifier: 6D:0B:18:24:6D:41:1E:78:D1:32:27:5B:20:4D:C7:CA:76:36:B9:25
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 01991E0B0FF1375311C8E62FCB051B45CDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0C47
Signing time: Sat 06 Sep 2025 08:01:05 +0000
Manifest this update: Sat 06 Sep 2025 08:01:05 +0000
Manifest next update: Sun 07 Sep 2025 08:01:05 +0000
Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: xuhyE1WA/AH5Gg54ZeDAPzZ6Punx/c0z3DcUdsi4vaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:0b:0f:f1:37:53:11:c8:e6:2f:cb:05:1b:45:cd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Sep 6 08:01:05 2025 GMT
Not After : Sep 7 08:01:05 2025 GMT
Subject: CN=6d0b18246d411e78d132275b204dc7ca7636b925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:f5:fe:39:ff:d2:a9:bb:f7:9b:75:cb:3d:
ba:a0:dd:0a:4b:97:b1:dd:dc:86:44:b1:b0:9b:07:
f5:f4:ea:1a:ce:e0:23:88:68:91:26:74:12:98:75:
1c:cd:19:b1:49:c0:51:05:e7:a3:27:d7:8f:d9:c4:
a2:78:97:a4:ad:40:a3:63:b8:c6:4f:35:89:ee:94:
51:d4:2b:ad:42:e0:c0:99:13:47:1c:3c:b8:6c:45:
9f:a0:59:ad:d5:a0:32:82:a5:f0:4d:cd:2d:2f:f3:
a2:41:53:0b:62:82:ab:43:d8:d2:c1:a3:88:0c:87:
81:86:9c:d6:eb:c7:9c:20:2e:dd:44:95:2c:25:79:
18:12:e3:df:b9:c0:15:d2:12:18:bb:ed:eb:22:f4:
3a:87:b7:f3:82:6e:d7:4d:97:05:ac:e1:55:fd:81:
0f:21:fb:cc:64:56:92:69:a7:be:61:ee:66:2a:7d:
bb:d5:c5:8c:92:43:f1:a3:c1:63:a3:ec:40:19:e4:
f0:ac:8a:e4:67:f9:91:95:dc:01:48:ab:51:6a:1e:
4a:82:39:2f:49:00:05:0c:8a:fd:f9:35:65:8c:1d:
64:a6:ff:39:a9:95:90:4c:e2:59:ce:f2:69:c0:47:
f4:d9:b9:10:de:9f:79:e0:b2:e2:d8:36:16:b9:31:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0B:18:24:6D:41:1E:78:D1:32:27:5B:20:4D:C7:CA:76:36:B9:25
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:7e:e8:d1:9e:c1:7f:11:db:90:ef:82:13:a8:5a:93:9b:
70:c6:09:60:18:44:20:23:40:cf:91:46:fa:78:8d:af:55:1b:
8a:0d:f9:30:9a:43:e5:92:f3:be:eb:b3:7d:82:bc:8f:53:39:
56:61:13:50:84:40:4d:7c:8f:80:74:9c:38:ae:7c:44:68:bd:
75:12:b4:96:b7:2c:6b:81:05:47:b2:b1:3b:e4:43:2e:d1:c9:
1e:8d:95:4d:a0:46:8d:07:ea:94:19:fa:73:4a:f3:57:6c:40:
d6:f4:57:f5:a9:9e:e9:86:72:d5:77:4e:6a:51:04:2f:a3:cb:
50:74:8e:24:a2:1e:da:f5:78:b9:19:14:03:2d:0b:ef:43:a4:
a4:87:25:1a:a4:44:78:c5:6a:22:36:f4:34:29:3a:fe:79:7b:
72:77:66:8c:15:88:d2:07:c9:a1:e2:fe:c7:2c:72:58:70:77:
8e:ae:29:4b:9c:ce:46:64:39:5c:20:42:a4:7f:a1:2b:d3:df:
2e:90:94:f5:55:c5:52:37:6a:33:36:a4:c3:eb:47:55:39:7b:
59:10:a4:77:55:05:1f:2f:04:53:eb:85:4a:e3:cd:eb:5e:55:
cd:70:94:e2:6b:42:87:c7:f4:ce:26:c0:78:a0:c8:60:af:c7:
43:55:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:02:14 2025 by rpki-client