Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
File: jrsOsZ53d9cDgAD2wS053tEgQkI.mft (raw, json)
Hash identifier: 5/RTnBRqsfUdnKDS/bBlYBIrupRyEelR/bpW5dpOStg=
Subject key identifier: 28:06:E7:46:42:5E:41:45:DD:76:86:42:EC:CD:8E:2E:0C:01:56:85
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 0197D9635225FCDFACEF6CFFE7B2DCFD448E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
Manifest number: 0C01
Signing time: Sat 05 Jul 2025 07:00:54 +0000
Manifest this update: Sat 05 Jul 2025 07:00:54 +0000
Manifest next update: Sun 06 Jul 2025 07:00:54 +0000
Files and hashes: 1: 68-2o2gnqeFje-83JI2NL7vcFCs.roa (hash: 5XT1BGaZiWzYIBY9EJMQdD9z2CvFYvirF/G5S8/gceM=)
2: jrsOsZ53d9cDgAD2wS053tEgQkI.crl (hash: GTUjL5BYmHWV4wr7hXJvst6PZTNeepRubXMN4j46rF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:63:52:25:fc:df:ac:ef:6c:ff:e7:b2:dc:fd:44:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: Jul 5 07:00:54 2025 GMT
Not After : Jul 6 07:00:54 2025 GMT
Subject: CN=2806e746425e4145dd768642eccd8e2e0c015685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:63:3d:90:05:c6:fe:8c:5e:1b:47:4f:4a:
c9:07:ac:9f:c1:e7:3c:60:18:48:b4:e9:c8:cc:dd:
a1:87:ac:1b:a2:1e:d4:fd:eb:a2:0f:6c:02:46:e5:
c4:bd:55:03:cb:6c:b3:bb:e7:b8:2b:2a:28:01:12:
cd:76:6e:c1:34:cf:06:4f:2b:d0:05:1f:82:24:de:
b7:03:3b:78:80:48:b3:3a:36:04:b4:84:70:bd:53:
b5:06:3a:1a:c7:b1:94:f0:a3:ad:0a:4e:60:fd:b4:
70:8a:12:50:8f:19:83:d3:1f:4f:5e:66:9b:5a:5e:
ad:cf:f3:3f:63:15:57:1b:72:cd:18:a9:d9:94:2c:
a2:c3:8b:3c:b4:2e:21:69:56:e7:9c:95:6f:2f:49:
b6:1d:2c:9a:73:c5:2d:58:6b:41:5c:20:1d:42:5e:
66:7d:40:1f:3b:b3:12:e8:ca:dd:c5:5e:c0:b9:a5:
0c:fc:e6:59:c0:8a:a2:53:28:0f:6e:76:0c:87:32:
5a:c3:b6:2a:48:ce:17:6f:78:36:1f:47:88:dd:e4:
ce:01:4c:15:80:24:a8:c0:6f:26:54:37:d1:93:b7:
cf:89:d3:da:a5:f6:96:40:30:e9:1f:83:ba:8a:28:
43:c9:f4:a7:eb:48:32:fa:31:9a:55:5e:6a:77:67:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:E7:46:42:5E:41:45:DD:76:86:42:EC:CD:8E:2E:0C:01:56:85
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c0:07:17:27:c1:1f:bc:fa:c1:ff:61:5b:60:7d:85:c6:44:
d3:44:0b:a6:4f:cd:2c:cd:81:15:8c:fe:f6:90:71:43:2d:a0:
16:38:88:c1:b3:da:cc:a3:e9:f0:d8:02:d5:1e:9d:79:9e:ab:
e0:09:0d:bb:b6:10:f2:5a:bf:8e:37:75:e8:f7:82:5b:a9:63:
ab:d2:e4:d8:7f:60:34:49:13:5d:26:77:d1:8c:10:77:92:13:
76:05:2e:d8:ff:d6:01:3a:42:d0:97:85:44:e2:19:f4:bc:61:
b3:e6:1b:06:d5:f9:fd:d6:28:ca:f0:6c:bc:54:11:21:09:62:
88:d9:03:e8:8f:ae:b0:14:05:8b:34:7d:94:ec:b8:a2:13:e0:
bf:0a:fb:cd:1e:a0:cb:50:15:55:b5:f3:66:2f:c3:a5:94:9b:
ef:f2:1e:3a:86:6c:9e:04:62:5a:29:c9:0b:1c:05:ac:3e:3d:
92:44:9b:23:eb:63:40:fe:c0:8c:7c:8e:e2:d5:bd:ec:20:8a:
8c:4a:2d:eb:78:af:1b:a5:37:12:fa:a2:f7:a1:96:d6:57:3f:
6d:b6:c8:77:5b:64:13:48:79:b5:d5:96:cd:9f:9c:a8:2a:d6:
fb:e7:b0:99:c7:bc:6e:9c:f2:a7:3f:cc:cb:5b:54:c9:24:72:
e4:48:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:10:06 2025 by rpki-client