Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: CmuVIpHiw+8Ybv90uS4XpGxXwW0C8szPI4Pd5Pb1qMs=
Subject key identifier: E0:E1:79:FE:2D:42:55:01:AB:09:26:1D:88:EB:5A:B0:77:C3:B3:EF
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 0197C45C2041DC3ED3E1371F81FBDE486AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0B94
Signing time: Tue 01 Jul 2025 05:01:01 +0000
Manifest this update: Tue 01 Jul 2025 05:01:01 +0000
Manifest next update: Wed 02 Jul 2025 05:01:01 +0000
Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: vy+fkLWRcdw6wM+t9yrhjbfe+AForK++Iki4mUyXU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:20:41:dc:3e:d3:e1:37:1f:81:fb:de:48:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Jul 1 05:01:01 2025 GMT
Not After : Jul 2 05:01:01 2025 GMT
Subject: CN=e0e179fe2d425501ab09261d88eb5ab077c3b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:4c:94:3f:bc:7c:d4:7c:4c:86:4f:cc:a3:
51:06:3a:6d:39:d4:33:28:10:d3:10:94:ed:59:d0:
da:54:c1:c7:cf:7b:f3:ba:76:e3:b9:ea:3c:ac:ca:
58:ee:4d:d4:2a:d1:c7:72:6c:46:47:22:4c:38:12:
9d:51:ff:53:b5:ad:55:86:34:82:7e:fc:98:1f:06:
63:c9:00:5c:be:77:37:65:d6:4f:a6:29:83:27:cf:
bd:51:92:84:1f:cb:bc:4a:e7:08:97:e5:e5:fb:62:
f7:cf:24:ef:ec:87:73:1c:f3:34:fa:2d:de:5f:21:
53:38:25:29:f1:a0:b7:28:7a:43:6c:71:b6:fe:ea:
1e:dd:ee:00:17:66:fe:3b:85:4a:12:bc:ae:2f:43:
03:e6:cb:f7:19:89:5e:5f:02:67:45:fe:47:d8:8d:
4b:ab:eb:04:bd:92:2a:0a:bd:40:a8:0f:37:b7:ba:
4f:07:06:b9:c9:ef:f1:f4:a4:e4:f3:6a:06:df:03:
0b:de:d1:26:11:ad:67:fd:c1:62:c1:68:0a:75:60:
e9:dc:ce:a0:b9:1a:36:71:39:29:fc:2d:3e:a7:db:
36:12:ae:d6:17:a7:78:88:a0:d3:65:59:ef:e8:28:
37:a3:ec:b9:da:8e:2c:1e:97:81:7f:81:1c:8a:75:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:79:FE:2D:42:55:01:AB:09:26:1D:88:EB:5A:B0:77:C3:B3:EF
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:51:ea:02:14:61:c0:cb:5e:61:c0:7b:a2:d4:28:83:7b:
61:16:43:48:8b:a0:ef:25:db:b0:d0:a5:69:04:91:5f:9e:eb:
07:84:8e:ec:7a:43:79:b5:4e:84:11:e5:5d:50:63:02:4c:15:
cd:c7:58:5f:83:a5:56:99:b5:fc:2d:41:de:40:dc:5b:33:f3:
d8:a0:8e:14:97:a3:7a:36:9a:77:42:26:49:bc:49:5a:b9:79:
fb:ad:58:8e:1c:46:d0:8e:fa:7d:d5:4b:9f:73:7a:d6:a1:64:
da:cd:6b:7d:2a:da:56:41:c0:18:a3:68:f3:d4:e4:d0:2a:16:
dc:e5:3c:c6:43:d4:fe:a6:6d:9c:1a:e6:9f:ec:88:a9:74:a8:
38:a9:20:ff:dc:d7:e8:06:0f:7c:84:c5:4d:50:1e:d4:1e:74:
fd:db:2d:ed:f1:2b:4d:99:81:ed:fc:0f:63:91:bc:fa:ae:55:
cc:98:0f:ed:18:b8:64:4e:04:a2:ca:45:fc:01:ad:0b:3d:a8:
d0:ad:94:e2:6e:3a:e2:d9:b6:40:5a:7c:2b:a5:8f:8f:d0:7f:
8b:f7:2e:5b:75:bf:03:bd:1b:3c:93:60:fe:61:bd:78:d9:4e:
30:93:50:24:c0:a3:66:37:7a:c3:01:66:bf:87:8d:1a:8c:55:
42:35:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:26:12 2025 by rpki-client