Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: v2mMQtf8OyZNbyODUlVw237MVQb8gazgjpKR9QHXkLM=
Subject key identifier: 44:1B:B2:C6:8F:06:A2:13:8A:53:36:5D:1B:0E:0B:26:3A:23:15:76
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 01974D0DEE32D9F55D1138807B78D90B1F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 09BA
Signing time: Sun 08 Jun 2025 01:00:47 +0000
Manifest this update: Sun 08 Jun 2025 01:00:47 +0000
Manifest next update: Mon 09 Jun 2025 01:00:47 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: 8koAl7zsQAFVqbedG2Ks4vqCYorwp09bPsz3JYFYnPQ=)
2: _l8jrf0myWSyZHEusIZ6cmnQafE.roa (hash: gjseV+JPjv3tCrp8kMrsCJYjL6BjqLfcHlxvbKTgJog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:ee:32:d9:f5:5d:11:38:80:7b:78:d9:0b:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Jun 8 01:00:47 2025 GMT
Not After : Jun 9 01:00:47 2025 GMT
Subject: CN=441bb2c68f06a2138a53365d1b0e0b263a231576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:62:3c:3d:50:b6:53:a6:d1:52:34:4f:14:
31:96:a2:21:c6:40:39:2c:f8:b5:2f:b8:84:4f:bb:
91:46:90:f4:8e:8d:76:9a:d8:62:80:62:c4:8a:60:
06:41:2f:b0:8d:b8:5b:a7:d9:fb:f9:2e:74:c5:9f:
f5:b6:f4:d3:c5:10:a1:e6:f6:dc:63:7a:7d:1f:cc:
c8:83:d5:64:14:bc:8a:59:64:8b:6a:ff:98:a1:33:
d2:7a:d4:d4:18:20:05:18:1f:a2:0c:c5:67:58:fa:
58:20:b2:56:45:b7:c0:c1:27:20:29:43:16:4d:4f:
0d:3c:38:37:f0:fc:52:37:6f:95:b3:bd:06:c9:22:
cb:ce:40:5c:6e:52:a8:52:ad:bf:49:80:c3:b0:67:
16:03:06:ad:ff:96:3f:c0:1f:e8:8c:fa:2a:8f:de:
7d:1d:ca:6e:7b:e9:1a:cd:89:84:4c:de:44:de:0b:
6c:12:a0:76:af:3b:06:e0:60:f1:13:fa:6c:c8:68:
1c:d6:8a:79:51:5a:16:ee:ac:22:30:d9:d0:fc:36:
77:b5:82:21:d6:43:83:1f:1d:eb:d2:d5:25:ec:c5:
58:c0:34:2e:1a:04:09:d5:f0:79:a0:82:d3:58:f0:
10:73:fe:3f:0e:32:01:bc:1e:4e:d9:82:2b:4f:c0:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:B2:C6:8F:06:A2:13:8A:53:36:5D:1B:0E:0B:26:3A:23:15:76
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:83:68:06:0c:03:55:71:31:99:75:2b:b3:15:e9:d1:c3:b8:
c5:56:fe:b8:31:30:a0:7a:ec:03:f9:46:c4:81:58:c9:05:99:
dd:bc:84:a2:50:b8:d2:81:c0:c4:ab:ae:4e:5d:8f:be:ee:25:
8a:27:ec:bb:80:8e:7d:51:e2:ee:54:2c:4d:c2:fa:40:df:dd:
fe:96:29:d6:1a:2d:27:1b:c7:7c:97:86:27:ff:9d:41:ef:54:
45:88:a1:af:a8:f2:36:d8:af:7b:56:70:a5:70:d7:28:28:c6:
04:c5:e8:03:1a:33:a9:79:99:16:1e:3b:6b:45:3d:28:2a:3f:
d2:fb:0f:96:63:3a:d2:ea:c5:73:c4:79:ca:19:11:82:7d:88:
fd:60:fd:32:34:e6:c2:46:02:be:48:52:7e:7c:89:d8:bf:f7:
8d:87:ab:59:77:29:b3:88:db:15:53:c9:e7:a9:b9:71:3f:38:
3d:4a:6a:39:f7:28:77:7c:8e:a9:03:86:5e:8c:fd:66:d1:64:
19:6c:b5:0a:54:59:0b:6d:1c:53:79:9a:a4:35:72:0a:76:57:
b1:61:94:9d:be:65:83:c4:db:5e:a1:e8:73:cb:77:8b:77:d6:
27:ec:5a:de:a9:bb:39:eb:dd:ca:40:ff:f5:9f:ae:96:fa:00:
41:3b:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:15 2025 by rpki-client