Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: ybGv4U0qXW4Y1lrFNIPBf5lN33YomrdvLZwqcXjkaBc=
Subject key identifier: C4:C8:12:EA:2D:08:79:9F:4F:69:F6:E2:C9:6D:8E:C6:2E:CE:E9:1C
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01974854FDB17966840832AA6D87A89F323B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:18 +0000
Manifest this update: Sat 07 Jun 2025 03:00:18 +0000
Manifest next update: Sun 08 Jun 2025 03:00:18 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: vBYruWoN1I6kKjMQa0gjVGCxsnvyImLgvZS9J/lk2dU=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:54:fd:b1:79:66:84:08:32:aa:6d:87:a8:9f:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jun 7 03:00:18 2025 GMT
Not After : Jun 8 03:00:18 2025 GMT
Subject: CN=c4c812ea2d08799f4f69f6e2c96d8ec62ecee91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:eb:65:56:37:ab:84:9e:39:47:b3:c2:03:
ab:fd:a4:b0:e4:d2:6f:34:0a:92:b2:5d:88:ed:d5:
50:e8:6d:fc:b6:34:50:a3:07:64:3b:a3:a1:fb:ab:
15:26:b7:10:3e:bc:96:ec:90:6e:bd:36:a4:83:ad:
04:d4:6b:59:4a:f2:86:10:c9:18:c3:5d:12:41:65:
3d:df:d4:82:39:e5:8b:5e:a0:f6:15:bc:ca:c9:74:
3f:b1:68:2b:fb:fd:93:d8:a8:2a:08:58:82:b5:26:
c7:26:05:a3:a1:cd:af:06:f8:fe:d5:9f:0a:84:f4:
ac:16:29:03:11:3c:20:1f:31:b4:7e:f2:93:d7:8e:
79:39:f7:a1:7d:26:fe:59:f8:b1:a7:70:cb:78:c6:
64:e1:1d:31:fc:6c:e1:2b:e9:d7:a8:b5:48:49:95:
71:db:40:6a:b8:b2:42:49:02:0f:29:7b:9c:fa:b9:
0e:75:33:a2:64:3a:81:fe:3d:7a:66:df:ab:8d:1b:
a3:7c:3b:7d:9f:5f:dc:da:38:a1:70:e4:2e:f2:e3:
f3:78:a5:81:56:b5:a3:d4:17:f6:0b:b4:1d:7b:01:
3f:fb:c5:04:21:5e:a7:2a:50:bf:68:44:0e:50:6d:
d1:e2:f6:da:12:d3:39:4e:57:ea:d0:04:b2:90:a4:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:12:EA:2D:08:79:9F:4F:69:F6:E2:C9:6D:8E:C6:2E:CE:E9:1C
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:09:c8:65:98:70:48:5d:ff:97:a0:32:65:50:a8:45:5a:
06:56:f8:dc:2f:ed:54:d2:97:d3:65:aa:a2:21:bc:d9:cd:de:
61:74:13:07:22:81:14:c5:a2:41:db:ed:21:59:25:a3:55:44:
b4:68:01:d1:39:77:8d:ad:70:e2:a7:d1:ce:32:22:85:4f:58:
80:a7:84:c4:86:48:18:a3:d6:b1:15:15:44:56:c6:93:5a:0c:
44:4e:5f:38:62:a4:42:55:07:f2:44:ad:e3:3f:1f:ae:ec:26:
07:d7:21:52:40:74:be:ba:65:5e:dc:20:80:88:d8:17:25:fb:
b3:c5:5f:48:72:82:41:a9:57:7e:4c:e1:6c:c7:aa:da:36:98:
8e:ae:88:85:ce:2d:63:28:8e:45:c9:e2:6d:68:50:63:43:82:
ee:22:eb:ed:44:ff:2d:9f:4f:2a:91:c4:eb:1d:1d:f1:03:a8:
46:3d:36:8e:25:d6:67:0b:1f:0f:50:92:ec:15:45:1a:32:68:
3b:14:91:41:ae:c8:04:99:21:e9:fa:00:8a:72:21:8f:6d:3a:
f4:6e:3a:75:58:fd:48:6f:5a:e8:56:94:f1:64:35:2b:1f:cb:
01:16:0a:cb:80:8d:4a:73:1e:ea:4b:d0:57:b3:14:48:73:a3:
43:84:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:33 2025 by rpki-client