Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: 3KUuxVkWGdjQdDbkHqsCeoWCbwoI9DPkuvU3nKD87eQ=
Subject key identifier: 98:A3:1E:E2:E0:6C:AE:9B:FF:E5:96:37:E5:30:E0:2F:A8:C1:F0:20
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 0197C613FE3E295A650D5C37C755C22B9AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 13:01:28 +0000
Manifest this update: Tue 01 Jul 2025 13:01:28 +0000
Manifest next update: Wed 02 Jul 2025 13:01:28 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: QmdQAw3biNW4RJOyeIuEhM99j9s4mtOBsRtS2ouIloM=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:fe:3e:29:5a:65:0d:5c:37:c7:55:c2:2b:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jul 1 13:01:28 2025 GMT
Not After : Jul 2 13:01:28 2025 GMT
Subject: CN=98a31ee2e06cae9bffe59637e530e02fa8c1f020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:26:16:c9:00:d7:1d:5f:37:95:d3:cf:37:
24:7e:a8:b5:0b:7e:75:0f:97:36:29:57:c1:9c:9d:
74:8e:f1:f5:a0:99:88:58:27:a3:d4:dd:b9:5b:a5:
63:b5:09:aa:39:e4:15:04:a7:b6:28:74:3e:5f:21:
22:b7:ab:e5:35:10:7c:5e:d4:a7:84:82:df:a2:fa:
50:55:8c:05:cf:c5:fc:dd:f8:92:8a:4a:3f:88:a5:
e5:dd:25:34:18:95:41:b1:26:30:78:97:b7:d7:91:
35:98:d7:9f:d3:2f:c8:62:01:cb:d7:48:12:9c:d0:
63:f5:56:bc:54:00:a1:85:f9:8b:60:55:91:71:c2:
f2:92:0f:52:3e:b0:de:24:ed:3b:66:6c:e6:08:68:
7f:19:18:a5:2d:56:c7:dc:43:c3:6f:0c:e6:24:70:
22:92:58:5e:ee:8a:64:18:50:a5:b2:e5:ba:94:32:
7f:24:55:7b:56:0d:f1:44:a6:dc:d0:b1:a2:45:0f:
41:9a:43:1a:ac:c7:c4:4c:d6:ef:c7:30:40:af:a3:
ee:9b:e5:12:9d:96:93:67:5a:99:e5:00:c4:6d:8e:
25:a1:d5:6a:c5:56:8e:90:12:55:ac:48:0f:86:51:
ac:7f:8c:ce:b7:ba:5c:30:f6:62:37:cf:a0:fe:c0:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:1E:E2:E0:6C:AE:9B:FF:E5:96:37:E5:30:E0:2F:A8:C1:F0:20
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:3b:9e:b1:8f:de:99:9b:67:13:2e:73:c5:c9:50:67:4c:
6a:c3:be:6b:21:da:d2:b4:53:d1:9b:0a:b2:4a:b3:54:89:21:
88:9d:33:57:4f:c4:b8:d1:60:59:8d:6c:a8:c9:d2:37:e4:22:
ef:f9:82:33:e0:40:0c:08:aa:53:0b:c9:98:fc:56:ce:93:1e:
14:fe:56:be:ba:db:16:66:1a:be:49:76:ae:3b:50:f7:c0:14:
c3:48:00:15:f0:01:5b:2e:72:ba:7f:d9:0c:88:f8:64:65:ae:
40:24:dc:2d:71:8e:fe:25:7f:9c:2f:d0:03:5f:00:8f:a3:b0:
a6:bf:8e:2f:47:09:8d:39:b2:e5:94:55:0b:13:0d:68:ca:4d:
ca:66:bc:fc:29:95:29:13:b0:31:4f:9f:43:89:dc:d3:f5:22:
d2:c9:83:d3:9c:7d:c2:ed:80:25:16:e5:b6:c8:cb:e9:7e:43:
0b:83:ea:10:ff:2d:7b:fe:a6:9f:12:82:d3:79:f9:2f:63:d4:
5e:f1:f3:b4:a7:4f:96:42:07:fa:c6:1d:e0:8c:6f:b7:e5:b5:
b1:fe:8a:d7:4e:b9:68:ce:ea:56:dc:f8:d2:eb:dd:bb:ff:45:
ec:b0:d5:81:fc:aa:54:fe:8e:d1:79:fa:dc:39:27:19:0c:e1:
71:47:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:16:42 2025 by rpki-client