Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: dqrtmIoRx0INot8KDKKvBmxwkDt8n2NYIkvbZyS11w8=
Subject key identifier: B0:F9:09:C8:D3:6C:C0:07:FE:E0:D5:6A:8B:44:70:BD:1A:BA:AF:D4
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 0198D4742A60136871ECE7D0FF6F0723F16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 08D2
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: eQjTNzXww1sBOyRIO+gaQX+zVmmrwaDco900TyixuYY=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2a:60:13:68:71:ec:e7:d0:ff:6f:07:23:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=b0f909c8d36cc007fee0d56a8b4470bd1abaafd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:38:0d:a7:e9:e0:dc:bf:ad:5a:73:7d:ab:
fe:a6:41:d3:65:6e:8c:2d:fa:fb:24:51:2a:8e:84:
2a:59:65:1f:84:ab:aa:80:59:89:02:05:85:84:9e:
04:a8:e5:7c:95:91:03:cb:34:b2:9a:20:51:6a:8e:
51:2b:62:b9:87:9b:a0:e5:40:61:e4:ae:2a:77:62:
07:61:9c:c7:e0:82:d7:5a:35:4d:7e:ca:a7:23:dd:
29:db:3a:bd:27:fe:6a:0f:e4:93:05:25:13:a3:17:
b4:60:06:46:5e:07:05:80:1f:4c:9e:26:3c:93:61:
60:10:ef:19:4c:7c:92:19:b7:5b:57:33:a9:49:1e:
fa:47:79:34:38:ed:52:ac:95:d1:e9:86:4e:70:b1:
1d:29:de:ba:51:ea:93:d6:52:3b:34:28:07:f8:ee:
70:a7:88:e8:c6:83:64:ce:ae:d8:99:b5:87:e9:56:
57:5c:f0:6b:95:1b:16:9e:a7:09:dc:2e:77:6f:cc:
41:bc:7e:cd:80:2a:4f:74:1b:3d:32:09:96:06:37:
a0:8e:0d:92:6d:04:7b:4b:a9:d0:a9:5a:6e:ec:a4:
1c:30:20:f4:b9:ef:83:29:6f:24:15:88:13:f5:29:
01:a6:e3:9f:77:88:94:ab:f5:99:08:61:55:65:17:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:09:C8:D3:6C:C0:07:FE:E0:D5:6A:8B:44:70:BD:1A:BA:AF:D4
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:71:be:56:d7:83:23:ea:61:4b:da:6a:a8:b1:9b:e4:e1:
fe:84:3b:85:b6:da:54:83:f4:9f:31:59:37:84:1c:ee:bc:8c:
44:30:d4:26:c1:ce:4a:b0:83:ba:53:8e:27:ad:e9:da:fd:6a:
b5:d5:d2:fd:32:51:73:4c:28:c1:f5:a5:bb:76:f0:03:d1:ef:
1b:49:12:92:8f:bf:20:cf:71:7a:a4:c7:64:f4:c1:fb:e7:8e:
ba:7d:94:9c:90:1b:46:a9:c1:53:6a:79:a8:d1:83:48:3c:e0:
eb:d1:e2:9c:35:5b:33:12:23:c9:90:bb:4e:a9:61:4e:46:68:
f0:f5:70:18:42:59:2d:c2:45:0b:95:2d:94:42:19:f0:71:b8:
be:79:69:7f:0f:56:ef:a6:ff:62:84:2c:b7:96:f3:9b:b9:55:
76:2b:3c:ce:1d:29:fb:cf:b6:b8:c0:60:bb:fc:2a:a6:ad:60:
9f:4f:02:86:22:22:6c:91:70:10:d6:02:08:84:c8:21:dc:0d:
df:33:0b:80:37:56:04:55:ec:ec:31:78:ac:76:14:44:42:59:
e4:ee:35:fe:03:96:94:d7:31:62:de:96:85:b1:65:6f:8d:66:
9b:39:c0:e4:ea:1e:87:06:af:68:c1:7a:13:35:ce:2d:84:a2:
c8:68:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:22 2025 by rpki-client