Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: GS5VKqJsRaUD4dZfzysQ6jonOpnzqLmBBy31g0rwxc0=
Subject key identifier: C1:10:5E:2D:1A:23:E0:32:D6:73:9B:3D:B9:5B:51:F9:06:2A:5C:AC
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 0196C8DFB4D94F91D0E211F1E0CE7E272DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 07C3
Signing time: Tue 13 May 2025 09:00:26 +0000
Manifest this update: Tue 13 May 2025 09:00:26 +0000
Manifest next update: Wed 14 May 2025 09:00:26 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: 4LncTMyACKT43k36he0oajK010gicAZhUgJabErlIwM=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:b4:d9:4f:91:d0:e2:11:f1:e0:ce:7e:27:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: May 13 09:00:26 2025 GMT
Not After : May 14 09:00:26 2025 GMT
Subject: CN=c1105e2d1a23e032d6739b3db95b51f9062a5cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:61:7a:12:88:28:da:d5:a7:af:9a:16:34:
43:60:aa:31:ca:a1:71:2c:44:78:59:b6:31:26:0f:
9c:9d:d4:ee:06:0f:6e:3d:63:41:6a:3b:24:91:69:
ef:f8:68:83:2c:00:1c:e9:73:05:bc:45:5b:d1:b4:
69:52:0a:b5:17:19:ca:a8:25:a1:c2:93:9d:be:dc:
c8:dc:fc:3c:41:bd:3d:69:cc:84:2e:38:4e:f6:d0:
e9:d9:ed:20:9e:a0:29:61:ec:f9:c3:5d:ad:37:d6:
99:b1:b3:a8:07:ce:c4:4d:b5:01:a4:f6:03:24:10:
14:48:79:8b:c4:0d:57:bd:39:12:18:9b:c2:bc:1e:
3c:3f:cc:2c:c1:e1:26:9a:b8:98:b4:1b:05:41:21:
df:44:15:15:05:a9:2c:a3:8a:ac:23:77:15:8e:f0:
cd:c1:3b:69:29:72:4f:d4:0d:ba:c0:a7:dd:f7:df:
da:a5:d5:44:fb:d4:76:df:fe:19:3c:3c:dd:7c:ed:
b5:6d:b4:9f:17:c9:04:c2:f8:ab:e8:b5:e2:f0:2e:
72:66:aa:7f:36:9d:7e:4d:4c:e8:86:f4:28:2c:d8:
68:8d:88:89:8d:8e:e9:13:63:06:fd:82:48:62:d4:
17:76:da:09:6e:31:e6:a7:e9:05:01:24:49:69:79:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:5E:2D:1A:23:E0:32:D6:73:9B:3D:B9:5B:51:F9:06:2A:5C:AC
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7b:04:14:79:4a:7f:2e:0b:f8:c3:2d:5b:63:a5:f4:75:55:
37:ba:11:52:e7:9f:4a:af:4f:d6:de:67:72:e4:8b:58:ae:73:
1a:61:8c:45:5d:30:c7:ab:27:a0:02:7b:99:50:cc:b8:6b:e5:
dd:22:60:34:14:18:9a:ba:51:39:a0:fd:25:49:a7:0c:45:30:
f4:f0:ed:97:ee:7b:dc:88:be:75:98:ec:88:dd:b0:f9:4e:1f:
e6:70:b6:b9:b5:d2:3d:40:96:7d:9c:63:1b:22:58:dc:c5:53:
0f:83:d6:ea:c1:32:55:48:1b:fe:19:30:1f:15:92:3c:e8:93:
e5:35:2a:e3:35:19:b1:e6:78:54:d3:e4:e0:7b:f0:bd:8f:25:
be:26:93:fc:23:26:3c:00:05:99:25:70:9a:3e:5a:ef:8d:64:
4c:0b:83:80:bb:92:e6:91:96:07:e2:59:b3:9c:13:2d:9c:26:
31:3a:51:a7:cd:fd:4b:fe:5f:b3:09:86:9b:b1:b9:75:82:d8:
8a:06:3b:89:9e:e7:b3:69:8f:cd:98:35:dd:d9:04:e6:0b:ad:
ac:a2:4c:c3:60:30:f9:a2:04:32:d4:5f:32:bb:10:6a:3c:05:
ea:49:29:d6:75:59:7e:bd:5b:4b:c0:49:e3:28:09:06:33:32:
16:f0:5a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbI37TZT5HQ4hHx4M5+Jy2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh
ZGM5OWQwHhcNMjUwNTEzMDkwMDI2WhcNMjUwNTE0MDkwMDI2WjAzMTEwLwYDVQQD
EyhjMTEwNWUyZDFhMjNlMDMyZDY3MzliM2RiOTViNTFmOTA2MmE1Y2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUthehKIKNrVp6+aFjRDYKoxyqFx
LER4WbYxJg+cndTuBg9uPWNBajskkWnv+GiDLAAc6XMFvEVb0bRpUgq1FxnKqCWh
wpOdvtzI3Pw8Qb09acyELjhO9tDp2e0gnqApYez5w12tN9aZsbOoB87ETbUBpPYD
JBAUSHmLxA1XvTkSGJvCvB48P8wsweEmmriYtBsFQSHfRBUVBakso4qsI3cVjvDN
wTtpKXJP1A26wKfd99/apdVE+9R23/4ZPDzdfO21bbSfF8kEwvir6LXi8C5yZqp/
Np1+TUzohvQoLNhojYiJjY7pE2MG/YJIYtQXdtoJbjHmp+kFASRJaXkh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEQXi0aI+Ay1nObPblbUfkGKlysMB8GA1UdIwQY
MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt
ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw
LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3sEFHlK
fy4L+MMtW2Ol9HVVN7oRUuefSq9P1t5ncuSLWK5zGmGMRV0wx6snoAJ7mVDMuGvl
3SJgNBQYmrpROaD9JUmnDEUw9PDtl+573Ii+dZjsiN2w+U4f5nC2ubXSPUCWfZxj
GyJY3MVTD4PW6sEyVUgb/hkwHxWSPOiT5TUq4zUZseZ4VNPk4HvwvY8lviaT/CMm
PAAFmSVwmj5a741kTAuDgLuS5pGWB+JZs5wTLZwmMTpRp839S/5fswmGm7G5dYLY
igY7iZ7ns2mPzZg13dkE5gutrKJMw2Aw+aIEMtRfMrsQajwF6kkp1nVZfr1bS8BJ
4ygJBjMyFvBaLg==
-----END CERTIFICATE-----
Generated at Tue May 13 12:59:05 2025 by rpki-client