Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: a7sReE+UjGh8ZEOOePV+0GRGbCPl1N5MT+eMH5J23qs=
Subject key identifier: B3:2D:0B:AF:DD:78:82:7F:21:EE:2D:EC:89:7B:08:30:C3:8D:FE:9C
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 0197B820E4071C00F770FC9A6459BE660875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0902
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: MSjPXaETmZ0qeDtGG3PX7/NxoLRhLFwHlYpCPxfnIJ0=)
2: 99RaY9xH4qOYuC0KdiJQrFMbC5E.roa (hash: TZUHN/mcHmz7AzTn504QkH94CMbEPlnfBvzJqjhXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e4:07:1c:00:f7:70:fc:9a:64:59:be:66:08:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=b32d0bafdd78827f21ee2dec897b0830c38dfe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:68:e3:71:fc:a9:d0:0d:6c:f2:75:7f:8e:
03:21:ae:82:e2:10:f8:fd:fc:46:24:64:c1:6f:9e:
4f:b1:2f:3f:94:3f:28:57:c1:6c:fa:51:cf:0f:07:
f8:5a:e6:c9:93:c7:6e:66:9f:4a:20:8d:7e:17:7a:
19:31:a4:09:f3:e9:8e:dc:9a:29:76:e8:89:61:c4:
9a:32:53:3f:12:53:0a:4c:d2:c7:4e:62:2c:da:af:
a0:cc:95:83:f7:f8:65:0b:61:fc:0c:0a:9b:0b:3f:
5c:2f:08:cb:f5:81:89:2c:b4:29:98:5d:48:c3:63:
ca:a7:49:cb:0e:7d:7f:d3:9a:ab:71:14:2a:2a:16:
8d:56:8b:af:c0:7f:06:80:d6:ab:7b:42:e8:9e:f5:
2f:57:40:15:d7:99:7e:1f:57:7c:ca:2c:99:bb:1a:
75:bf:fb:0e:97:d7:bc:1b:9d:a5:34:1a:4f:23:04:
0f:9d:26:61:e6:f6:90:9e:59:a9:33:e2:d8:bb:26:
42:14:7d:24:8d:ca:fe:bf:90:4c:4b:c6:a0:4a:ce:
92:a0:77:1d:23:f9:77:6b:98:e9:dd:42:f1:fb:01:
a5:11:e1:04:58:2d:22:15:ac:2e:7c:4f:03:ec:cb:
91:6c:be:a1:fb:58:7d:04:cb:b6:13:a7:84:d7:72:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:0B:AF:DD:78:82:7F:21:EE:2D:EC:89:7B:08:30:C3:8D:FE:9C
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:86:84:61:e7:d1:d7:4e:ec:52:97:59:1c:df:e8:68:ee:
d9:78:11:21:23:80:64:63:cd:de:7e:1b:b0:6f:e6:54:5c:fb:
c4:da:df:1e:08:f9:e0:f2:9c:88:24:fc:9c:17:8a:16:6e:56:
b3:99:e3:89:36:08:31:12:5c:c4:a7:c1:a5:76:a3:62:b0:36:
77:b1:d7:80:8a:5c:f1:82:88:03:cc:64:84:a1:5b:bc:71:0d:
df:81:e3:d2:de:eb:e3:71:39:3e:89:9d:2e:3f:e5:bb:09:c1:
2c:1f:f4:4a:94:ff:0c:c0:d0:90:61:1a:14:6b:0b:41:df:60:
38:4f:84:3a:9c:be:f2:61:a4:b2:68:d7:1a:03:e5:aa:ae:ac:
e2:04:ef:1e:ec:cb:52:26:48:31:07:25:4a:e0:5d:66:54:06:
e7:2a:3b:48:87:0f:0f:46:3c:6d:dc:25:b1:4d:63:e4:86:db:
34:a9:7d:74:4c:71:2c:ee:44:43:ec:2b:ba:03:be:d7:5f:b7:
0c:09:ca:a9:e3:59:dd:05:a6:b0:e1:5a:9a:6a:72:a7:f4:5e:
b7:6d:2b:0a:d5:a6:87:58:dc:9f:24:80:21:da:c0:20:33:a0:
cb:62:45:56:a5:90:6d:dc:c2:79:3a:e7:c5:3f:4d:c5:b2:90:
4c:a0:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:43 2025 by rpki-client