
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: rySlEATE+vKk27qVcgmdkqU7FQ/pLJbd9McXJMmaWkk=
Subject key identifier: 5B:0E:69:40:A2:B1:35:46:02:E3:93:2A:68:BA:45:05:13:96:7D:5D
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 01975FEFBC6DD77B61EFFDFD68180BC0E890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 09C3
Signing time: Wed 11 Jun 2025 17:00:36 +0000
Manifest this update: Wed 11 Jun 2025 17:00:36 +0000
Manifest next update: Thu 12 Jun 2025 17:00:36 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: 7347iydp9j2Ln0uIVs5gHZS3kPgsVkYtMEByb3m74pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:bc:6d:d7:7b:61:ef:fd:fd:68:18:0b:c0:e8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Jun 11 17:00:36 2025 GMT
Not After : Jun 12 17:00:36 2025 GMT
Subject: CN=5b0e6940a2b1354602e3932a68ba450513967d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:4f:4c:9c:56:7a:90:69:e8:fb:3c:ea:2b:
56:96:23:59:c5:0f:32:af:7e:b4:0d:79:ea:31:42:
c1:ef:9a:be:59:5b:65:30:d7:5d:b6:05:f3:7a:be:
ec:fb:73:af:bf:e9:d5:81:63:bc:b6:5b:2d:ed:f3:
6a:08:62:8d:4d:16:11:7b:0b:0a:e5:78:48:0d:54:
e0:f8:03:40:4e:bf:38:bc:0f:31:a3:e4:56:87:45:
24:bc:ed:f8:f0:a3:c4:17:f7:9f:5a:0c:ac:18:a7:
27:92:3b:a0:f7:fa:01:1f:11:6c:37:8f:12:72:0b:
74:62:60:ab:21:b7:2f:70:c9:3b:f7:b6:86:43:df:
3f:d0:c4:31:fe:d7:bc:08:f7:d2:ce:72:d4:0a:cf:
fb:ef:fd:85:83:f6:89:28:84:6e:92:af:ed:ee:c5:
34:b7:4a:99:bd:be:fb:7b:cb:7f:ad:90:c6:19:8d:
4c:12:b7:d0:25:d0:67:2a:9f:cd:81:d4:fd:45:45:
ec:20:3e:07:af:0d:2f:8e:ad:bf:c1:6b:d2:04:f5:
b3:4f:23:49:58:c4:33:69:88:5d:20:cc:21:c8:52:
dc:96:e5:4e:ca:fc:fc:55:45:b5:20:58:a1:82:ab:
af:9b:38:fa:b7:40:5e:eb:b3:f0:d2:b4:ea:75:2e:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:69:40:A2:B1:35:46:02:E3:93:2A:68:BA:45:05:13:96:7D:5D
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:ed:80:27:03:02:0d:57:3b:e8:bf:6f:36:f2:c4:75:60:
10:d6:ad:6e:70:87:65:5b:b0:17:6f:92:04:a5:08:e3:a6:92:
5c:ef:aa:df:56:6a:dd:4a:0f:ce:7a:60:bb:09:d1:b0:af:15:
45:58:53:c8:32:07:da:e7:ae:ed:37:27:08:6a:3d:e5:ff:63:
e3:7e:3d:98:9b:57:df:44:69:fe:d6:95:36:9b:f9:c7:e5:d9:
88:ce:e9:d3:56:95:79:3b:27:55:f6:07:8c:1f:b5:a6:7c:4d:
d7:a7:62:7b:7a:8b:bf:96:bb:2e:92:cd:eb:f0:ed:ef:e4:2a:
17:66:0e:b3:70:ab:71:19:8c:d4:b8:a0:ad:ef:de:ef:de:19:
96:b4:71:d1:6b:62:24:cd:26:6c:24:c2:b6:ba:eb:68:76:5a:
2f:77:8b:85:d2:f0:76:b6:8d:95:56:fa:7f:7f:ea:67:5d:3c:
f3:21:13:80:cb:f8:7c:e3:68:e8:03:c1:0f:fe:01:33:ad:fd:
6f:b6:c7:6f:2f:b0:b8:2d:3f:cb:2a:6e:eb:b7:25:c1:af:8d:
39:1e:85:3c:04:61:b1:da:5e:fe:61:d2:0f:5f:b2:aa:94:7f:
45:ba:f5:b2:d4:88:c7:1e:0b:24:6a:3d:57:05:ca:71:de:d0:
0e:27:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:21 2025 by rpki-client