Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: kXnRrOyXatLnolKrqFSiACOW4xE0+cnewts4/lWMJP8=
Subject key identifier: 0F:8A:8A:7F:58:DC:F1:17:8C:3C:12:17:50:02:77:1E:1C:1F:E0:E1
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01976403F08B5F7713C75479680D629AC330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 12:01:09 +0000
Manifest this update: Thu 12 Jun 2025 12:01:09 +0000
Manifest next update: Fri 13 Jun 2025 12:01:09 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: x/YE9acXkc4oBHA+J4MRW7J0Aj85a3s35fA32z1WwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:f0:8b:5f:77:13:c7:54:79:68:0d:62:9a:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Jun 12 12:01:09 2025 GMT
Not After : Jun 13 12:01:09 2025 GMT
Subject: CN=0f8a8a7f58dcf1178c3c12175002771e1c1fe0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:01:4c:6f:95:94:0f:b1:5d:43:a5:a4:97:
4f:62:0a:ae:ee:f5:7a:76:9d:31:38:76:7a:20:2c:
74:e3:1c:9c:d2:41:29:eb:af:42:5c:45:de:a5:ae:
1f:5f:bd:3f:86:ea:ea:0e:94:2d:e7:a1:93:a9:de:
83:4b:f9:32:87:11:fc:86:ff:91:bf:42:65:a6:a6:
67:c2:1b:65:c7:ba:a2:56:bf:48:1d:71:9c:c8:6a:
30:29:7d:2f:dd:67:0b:f7:cd:d9:dc:0e:98:9f:00:
4c:1e:c0:75:2f:df:21:7b:00:45:50:80:fd:57:8a:
79:42:a2:6e:66:df:30:03:11:f7:23:ad:84:6a:2d:
d2:1c:2e:d1:e5:c4:36:e5:45:a5:26:e7:04:7e:37:
33:a7:83:53:26:7e:65:9b:b1:30:45:6f:f1:b4:67:
57:9a:46:70:60:4c:78:d7:42:9c:f1:0b:a2:f3:28:
9d:75:2e:ce:ae:86:2f:69:4a:92:15:40:f3:6d:b2:
11:be:0b:a1:4b:11:7c:c3:bf:c2:2b:75:ef:10:cf:
e0:90:89:5c:0e:7e:3a:e1:aa:43:68:4e:9e:84:f6:
be:06:c5:9d:8f:a9:cb:70:66:b0:88:49:8f:61:ce:
d0:de:ad:37:57:a4:20:fa:29:ac:5a:2f:37:dc:e6:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8A:8A:7F:58:DC:F1:17:8C:3C:12:17:50:02:77:1E:1C:1F:E0:E1
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:29:27:58:d0:ba:75:ab:97:e3:67:c5:e2:65:c2:5b:1b:01:
c7:44:64:d0:2f:fb:3e:be:52:bb:a4:e9:9b:44:d9:1b:8b:10:
5c:a4:9b:df:8b:65:d8:e9:fe:7a:a5:ee:6e:61:73:ec:03:d6:
d0:b5:ce:d6:f7:72:c8:9c:90:04:62:86:b6:dc:29:b5:fd:a2:
3e:63:b2:0f:87:6f:d4:26:d0:d3:0c:4f:41:a7:9d:72:c2:85:
7b:d6:16:e2:91:f9:ae:f7:cb:30:3c:68:c8:78:95:6e:f4:d9:
ca:1a:23:1b:19:f3:c4:fd:43:bc:c2:79:8c:80:8e:21:a1:9a:
ec:9f:92:d1:eb:5d:1b:a7:d9:f0:93:03:22:ea:27:b3:1d:a2:
68:06:a7:0d:69:42:a2:a5:7a:28:83:f0:97:42:f2:57:30:6a:
47:0c:cc:a7:f0:f9:cd:f9:e1:16:8d:c6:9d:58:93:52:5a:00:
00:59:ae:03:b2:af:a2:77:17:00:86:f6:2e:f3:b4:ad:c0:23:
54:c8:93:38:37:2c:26:49:fd:d1:4e:df:bc:09:39:fb:22:99:
34:49:46:d9:9d:33:72:d7:c5:a3:e4:2e:9f:2e:e4:e0:6c:24:
ef:3e:50:65:d4:ef:5d:ad:d4:fd:c9:18:e6:bd:9f:bc:fd:e8:
74:5a:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:14:11 2025 by rpki-client