Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: l8SsdlqDhg3/nAePWrwi44j6mRjN/w9OQS+RTnpZzmY=
Subject key identifier: 83:E3:B0:B8:73:FE:AE:62:1D:26:52:0F:6E:5A:5F:D5:87:D7:6F:C3
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 01974967A3CF4BA02221B447818FAE50285A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:00:18 +0000
Manifest this update: Sat 07 Jun 2025 08:00:18 +0000
Manifest next update: Sun 08 Jun 2025 08:00:18 +0000
Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: HjNE0l8W4DIb87MnqVS0lYNEc+zAJaMteMud0GM8uzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:a3:cf:4b:a0:22:21:b4:47:81:8f:ae:50:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Jun 7 08:00:18 2025 GMT
Not After : Jun 8 08:00:18 2025 GMT
Subject: CN=83e3b0b873feae621d26520f6e5a5fd587d76fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:87:f7:92:8c:a4:7e:f4:2a:21:87:d2:df:
08:72:1b:62:d4:75:db:81:8d:5d:89:14:13:40:61:
c0:40:80:b9:7a:2c:88:3b:09:35:a1:cb:fe:57:68:
2c:b5:fd:65:f0:75:23:eb:2a:03:b9:1f:05:f9:70:
6c:9b:b9:6f:7f:44:97:9e:0a:fb:b7:3f:e2:5e:92:
03:89:d9:34:29:08:55:7e:f1:04:9a:af:52:46:8c:
b1:af:3f:ef:32:61:d6:5a:10:2e:8b:db:3a:ba:67:
d7:17:43:9b:07:5d:5f:47:3f:ac:48:39:e5:69:79:
f6:48:e0:be:f8:4e:8e:72:ad:cf:95:ed:c7:65:af:
bd:b0:52:df:12:e2:4c:a4:c3:b1:52:df:69:59:34:
84:b5:e5:b8:2f:5b:9f:13:2a:14:09:b1:31:29:85:
4d:95:67:73:d0:4d:88:25:9a:ec:37:f7:f6:b3:83:
37:d1:e0:cd:ce:48:1d:53:63:55:6f:6f:68:5f:21:
f8:2c:85:46:5c:96:4d:44:46:7d:48:b0:64:d3:c2:
98:b7:9c:61:24:60:97:28:41:9c:4f:59:f6:c4:b3:
ae:0c:e8:36:a8:b6:b4:c1:77:34:7b:0b:38:3e:ac:
0a:71:fa:19:b7:03:7b:6a:5e:76:fc:04:3d:1d:8e:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E3:B0:B8:73:FE:AE:62:1D:26:52:0F:6E:5A:5F:D5:87:D7:6F:C3
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a4:5c:59:cf:b1:95:20:cb:eb:60:ac:82:f6:b0:96:54:fb:
87:d5:64:9b:d5:89:dc:d7:b5:95:33:f9:af:35:94:d5:bd:76:
78:fb:cf:dc:75:26:1c:52:00:45:19:1d:43:42:b2:4c:97:c5:
5a:77:57:62:f1:1b:1b:5f:93:ba:dc:f6:6e:16:22:64:37:63:
3b:52:39:b9:57:43:0d:94:97:f9:7b:ad:c6:84:93:55:58:3a:
11:5e:bf:fe:96:84:14:aa:16:5d:c0:46:f6:ff:16:c4:8d:15:
67:65:e3:3e:ba:b5:bb:ed:1c:5d:e0:3b:3f:a4:a8:66:28:dd:
4c:15:fb:a1:7d:f6:b9:dc:5c:e0:ad:bd:75:6a:ea:83:32:c0:
d1:f4:c7:b1:86:a4:e8:8c:7d:73:9e:bc:63:e1:81:45:2d:8b:
12:58:dd:b7:92:b7:ba:e3:73:d4:f3:d3:bd:1e:30:42:b6:a3:
50:a1:d4:3b:3d:33:52:84:e9:af:2c:66:91:f9:cd:0d:e2:fb:
f4:1a:00:51:4c:87:4b:f1:df:aa:01:bc:57:4f:4c:7c:be:2b:
72:c9:fd:12:6f:a0:0d:66:95:03:0c:95:03:dc:01:83:13:86:
ff:43:f8:86:31:bd:85:2c:45:27:78:7e:2f:66:a2:47:4c:82:
a1:06:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:15 2025 by rpki-client