Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: XsLf4lwuis5Rfs49NLexX+Y2XPjiVsZFX0+EK1Ij8po=
Subject key identifier: 96:9C:68:4A:7E:41:D7:53:75:2B:4E:13:59:F5:EF:B2:42:0D:BB:B8
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 0198D54E7D99176A200B8C2F339AED3163B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 05CC
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: au4yuIrc54pKd2oJgzO5fYhE2DyyDyFaUycdE+6ayoE=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7d:99:17:6a:20:0b:8c:2f:33:9a:ed:31:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=969c684a7e41d753752b4e1359f5efb2420dbbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:da:a9:84:6f:df:32:12:6c:9f:00:41:c7:
0a:c5:46:e7:d1:ba:0b:57:e6:68:b6:9f:62:8a:4d:
90:0e:83:ec:a8:b3:d5:13:5c:3b:1e:ec:ce:3c:26:
13:e2:f3:e8:69:d7:c0:80:bc:d6:ee:80:6f:47:4b:
d7:44:09:e2:f1:5a:de:4c:6d:84:96:6e:57:7d:09:
8a:62:c1:51:4a:06:e5:64:83:de:32:aa:f5:0d:de:
0e:cb:e8:c2:81:b5:f7:a9:95:54:81:1f:06:19:13:
20:c6:21:aa:ea:fd:14:6e:b0:c9:fe:2b:fc:e4:ef:
96:5c:f8:9d:4e:c5:77:8b:9a:aa:19:b4:98:d3:85:
93:b3:65:5a:b8:1f:31:dc:02:bd:0c:58:d9:ec:a3:
30:64:0e:a7:fb:2c:53:aa:1e:02:b9:2a:ae:27:1c:
c1:1a:74:f4:4d:7f:0a:1e:f7:37:ca:1c:f6:36:3c:
ac:ca:37:f8:8a:df:25:f7:f9:d2:7d:98:96:0c:52:
7f:cc:39:69:fd:6a:68:70:73:36:05:98:6c:d3:71:
c0:d8:d6:db:77:04:d1:20:2d:a8:bc:41:c1:11:5d:
e4:0f:2b:a9:bf:95:87:46:ff:c3:41:29:67:ce:f6:
a2:43:58:13:ac:81:da:9e:5c:b0:ae:21:5e:d3:7f:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9C:68:4A:7E:41:D7:53:75:2B:4E:13:59:F5:EF:B2:42:0D:BB:B8
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:37:47:b8:fd:05:16:0e:63:e7:c4:1b:88:df:26:b6:94:b4:
26:70:f8:68:ea:a6:1a:6b:2d:8e:a0:16:b2:4f:37:2c:2f:42:
ee:f0:1c:2b:9b:37:f4:8d:e7:ab:35:5d:ab:28:f4:40:98:43:
d9:85:ea:30:2f:ab:a6:5d:90:56:f4:ed:86:47:8e:de:5d:34:
96:dc:92:cb:98:8f:2a:58:be:35:88:c0:ba:83:0e:66:d8:f2:
e3:8c:20:a0:a3:c0:b4:f1:e4:58:1a:c8:70:47:d6:63:7f:3b:
a2:4a:1e:9b:f6:49:bb:ed:4b:37:db:42:ec:41:0e:f5:89:60:
e6:0b:d2:da:5b:93:ab:40:4e:b3:3d:61:11:07:25:7d:52:47:
e3:08:ea:e9:fa:b5:2b:de:c6:0b:9d:77:7e:7e:2a:c3:5b:9a:
88:f6:76:9d:76:03:f1:c4:1f:74:b1:32:d8:f5:a4:80:57:cb:
da:94:22:dd:cd:36:74:6d:14:05:45:b5:42:3c:ad:db:8d:30:
a0:43:0e:61:6e:87:f1:b6:40:9e:7f:2f:b4:17:f8:cc:c6:73:
f8:45:80:44:19:e2:d4:a3:f5:d6:66:11:5b:cf:b6:72:d3:83:
51:b3:17:40:14:6c:bd:c5:46:5b:45:49:b5:39:62:8c:ce:fb:
b9:67:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:38 2025 by rpki-client