Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: qhR4sr3oYo2mzeiKTOpLBWiW0SqJ38HkDQtHiIJ896I=
Subject key identifier: 0E:B6:B6:79:BB:63:B9:5A:8B:5F:99:C2:96:ED:2F:BC:08:64:75:E7
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 0197B89021D80F372D0BB5AAC4C06B755EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0E38
Signing time: Sat 28 Jun 2025 22:02:22 +0000
Manifest this update: Sat 28 Jun 2025 22:02:22 +0000
Manifest next update: Sun 29 Jun 2025 22:02:22 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: mMcoFHCm+6ctAaULJ98tnRrxF0cGgja66EKDBY4J5S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:21:d8:0f:37:2d:0b:b5:aa:c4:c0:6b:75:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Jun 28 22:02:22 2025 GMT
Not After : Jun 29 22:02:22 2025 GMT
Subject: CN=0eb6b679bb63b95a8b5f99c296ed2fbc086475e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:ab:1d:eb:62:a4:3e:68:41:36:64:76:2f:
e7:ba:c1:34:04:c4:c2:59:ba:10:43:51:a4:b6:20:
4a:f0:89:1c:c5:db:64:e5:aa:c6:2f:34:52:12:c9:
16:20:0b:0f:87:35:5b:e0:f7:ca:83:a9:82:e0:aa:
ae:c1:ab:d8:4a:8d:30:68:e0:3c:23:a7:ac:d8:3a:
0a:1a:30:df:1d:5e:a7:5c:d9:56:1d:bd:1c:b7:e6:
59:f6:06:e3:34:94:e8:5c:6d:c3:c8:3c:01:76:54:
38:41:e6:7f:32:ca:02:63:cc:4d:1e:dc:91:34:26:
b3:be:59:18:2a:7a:cf:f6:08:c9:98:15:64:1f:0e:
84:88:d5:93:90:8f:d2:b1:5b:db:9a:ad:51:fa:d1:
62:f6:da:9e:b2:b1:c0:be:34:4b:11:77:e9:d9:d2:
18:d7:7e:52:52:dd:25:9a:ed:73:6b:f3:0a:c6:27:
31:fe:c2:dd:1b:5c:d8:a4:40:1b:03:9f:f2:e4:c0:
95:cd:f1:cf:02:b8:f6:8f:13:be:6c:75:ec:f8:2b:
b7:5f:c8:66:13:64:44:15:08:d0:a4:75:38:f9:5d:
24:2e:97:bc:fe:3b:0b:b7:33:40:3b:34:3b:e7:8c:
15:7b:9a:b1:75:ce:8d:2f:b2:48:16:18:05:bb:7b:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B6:B6:79:BB:63:B9:5A:8B:5F:99:C2:96:ED:2F:BC:08:64:75:E7
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d1:d1:a5:f3:2d:fb:8a:05:43:26:19:e3:cc:79:d9:e2:cd:
6a:9f:e2:74:41:4c:da:c9:b5:6c:fd:ea:d3:6b:f9:f2:c8:33:
34:72:dc:d1:76:e6:f2:c0:99:ee:5d:0e:ba:df:c9:56:d1:9b:
36:8b:86:48:71:94:18:0f:d5:50:5d:af:25:f0:87:cf:8a:0b:
87:9d:c0:d9:3d:7e:99:50:54:8d:3b:8c:93:05:01:31:02:67:
bc:c1:76:84:13:dd:da:c4:5f:2b:37:6e:97:81:5b:d8:68:ac:
54:92:fd:d1:6d:1d:69:52:cd:0b:47:e2:47:b7:5a:e2:3b:8d:
75:05:a4:cd:67:ee:a3:d7:69:04:3d:94:e3:67:98:43:78:f7:
25:0c:44:60:9b:dd:e6:ea:89:30:77:bd:f0:21:a2:88:3d:bd:
a0:f1:78:ac:68:88:1f:3d:f2:f9:48:7c:37:00:6c:d1:6f:5a:
7b:a0:56:20:ce:10:8f:d6:07:86:5c:f4:77:9e:b8:14:b8:b3:
52:2c:f9:28:e5:07:bb:a8:61:17:85:7f:0e:8b:1c:d7:fd:b3:
33:c3:74:2e:d4:08:02:42:1b:a0:a3:0b:b5:5a:40:0c:35:a8:
49:14:7f:96:f6:78:61:1a:a4:f7:2f:d3:49:e0:32:81:db:88:
d4:db:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:48 2025 by rpki-client