Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: PiD2zMyLJVy8SzeuKaLAmitaLv7Zv8c20mrQ9br1wtw=
Subject key identifier: 95:EF:CB:D9:C3:3E:7D:8C:53:06:4B:1B:A3:18:18:D5:7E:8C:20:60
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 0196D1AC7E3FD6B8861DBB9EA0E0EECABA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 04C1
Signing time: Thu 15 May 2025 02:01:04 +0000
Manifest this update: Thu 15 May 2025 02:01:04 +0000
Manifest next update: Fri 16 May 2025 02:01:04 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: nmoc6LxZ6OzvUIUwrhE8QMRq5zh6fbJd8Dm4qvS/xbQ=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:7e:3f:d6:b8:86:1d:bb:9e:a0:e0:ee:ca:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: May 15 02:01:04 2025 GMT
Not After : May 16 02:01:04 2025 GMT
Subject: CN=95efcbd9c33e7d8c53064b1ba31818d57e8c2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:db:c3:b0:3b:f7:f0:f7:3c:e2:95:e1:58:
ce:a3:08:58:62:92:83:fe:bf:32:a9:b6:92:ce:db:
d0:71:b1:00:51:e1:12:a5:7c:2a:38:8a:e6:25:19:
4d:ed:47:b7:97:45:68:1f:83:24:6f:06:3d:f0:db:
a8:ee:70:c2:90:e4:83:65:b1:42:12:f8:b0:c7:35:
60:72:ca:c0:33:d0:b1:f0:19:a5:b5:55:0a:2e:c5:
a6:76:da:1a:99:49:01:b7:d1:cd:f5:54:82:ae:ba:
20:a1:1d:30:2d:5e:ed:dd:79:a8:c2:67:3d:23:6c:
45:07:30:85:f4:35:2f:d7:0a:8b:fd:2c:d1:04:9e:
7a:41:ce:15:fd:7c:9e:d3:92:62:5e:42:42:8a:3c:
ac:76:01:52:cc:5c:13:8d:86:e2:64:35:4e:b9:e9:
cc:4a:d9:2c:f8:83:19:ba:3d:49:d3:30:59:ec:ed:
0b:18:29:10:b3:bd:63:0d:f5:95:49:79:0d:e1:08:
5e:54:92:fe:90:fb:19:c6:61:f4:e2:a9:66:b6:a2:
2c:a9:ae:8a:76:d4:e3:61:fc:73:1c:81:8b:a5:4e:
d6:19:9f:76:04:e8:69:42:fb:81:d2:e6:ca:c6:ef:
5b:44:2a:c8:10:14:0c:4e:10:51:0b:a4:9a:ca:81:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EF:CB:D9:C3:3E:7D:8C:53:06:4B:1B:A3:18:18:D5:7E:8C:20:60
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:91:56:59:85:09:3b:bc:0f:49:09:45:a2:75:9e:ab:bb:
cf:e2:22:59:32:17:5d:0a:b8:c1:9d:a2:13:e1:51:46:42:1d:
19:45:b6:a0:18:84:fa:9f:d5:84:2a:fa:c8:4e:4d:29:33:4a:
47:49:b5:2c:29:4a:25:17:df:42:1f:59:80:da:54:c3:86:cd:
11:06:fe:f7:88:e2:e8:89:8b:c5:6f:ff:13:1a:90:33:ce:d2:
90:d7:5b:0a:f9:89:a5:0b:be:c9:54:8d:1a:78:1c:e7:f8:f6:
4c:f6:7c:dd:34:17:88:60:bf:ea:42:d5:e3:2c:36:ed:c5:ee:
35:db:62:40:f3:d5:fd:22:88:84:70:6e:32:ca:1b:79:b3:4f:
00:7a:b0:07:7c:76:40:42:e9:f2:b5:7b:d6:48:12:3d:63:53:
0c:2c:55:f4:4e:4e:69:9b:bc:8a:c1:ac:24:9c:70:5e:71:bc:
d4:39:18:2a:4b:22:fd:45:55:5b:fe:d7:bb:11:89:bb:09:71:
3e:11:d6:64:f8:c7:3f:6b:a3:7f:b7:66:10:95:bf:0e:b4:c1:
e0:f2:a0:1f:42:58:c4:19:b6:aa:5a:d4:0d:8c:1d:7f:0c:14:
ab:18:94:1e:5d:68:ce:bf:33:5d:5f:2b:75:6d:3d:62:25:f4:
36:39:8c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRrH4/1riGHbueoODuyrpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0
YzNiMDgwHhcNMjUwNTE1MDIwMTA0WhcNMjUwNTE2MDIwMTA0WjAzMTEwLwYDVQQD
Eyg5NWVmY2JkOWMzM2U3ZDhjNTMwNjRiMWJhMzE4MThkNTdlOGMyMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Erbw7A79/D3POKV4VjOowhYYpKD
/r8yqbaSztvQcbEAUeESpXwqOIrmJRlN7Ue3l0VoH4MkbwY98Nuo7nDCkOSDZbFC
EviwxzVgcsrAM9Cx8BmltVUKLsWmdtoamUkBt9HN9VSCrrogoR0wLV7t3Xmowmc9
I2xFBzCF9DUv1wqL/SzRBJ56Qc4V/Xye05JiXkJCijysdgFSzFwTjYbiZDVOuenM
Stks+IMZuj1J0zBZ7O0LGCkQs71jDfWVSXkN4QheVJL+kPsZxmH04qlmtqIsqa6K
dtTjYfxzHIGLpU7WGZ92BOhpQvuB0ubKxu9bRCrIEBQMThBRC6SayoHIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXvy9nDPn2MUwZLG6MYGNV+jCBgMB8GA1UdIwQY
MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt
ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj
LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtGRVlmF
CTu8D0kJRaJ1nqu7z+IiWTIXXQq4wZ2iE+FRRkIdGUW2oBiE+p/VhCr6yE5NKTNK
R0m1LClKJRffQh9ZgNpUw4bNEQb+94ji6ImLxW//ExqQM87SkNdbCvmJpQu+yVSN
Gngc5/j2TPZ83TQXiGC/6kLV4yw27cXuNdtiQPPV/SKIhHBuMsobebNPAHqwB3x2
QELp8rV71kgSPWNTDCxV9E5OaZu8isGsJJxwXnG81DkYKksi/UVVW/7XuxGJuwlx
PhHWZPjHP2ujf7dmEJW/DrTB4PKgH0JYxBm2qlrUDYwdfwwUqxiUHl1ozr8zXV8r
dW09YiX0NjmMfw==
-----END CERTIFICATE-----
Generated at Thu May 15 10:22:57 2025 by rpki-client