Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: X143+EXmlvpqLRlogY4HvFpkI0NTXckjFlQ3GGWZHXE=
Subject key identifier: A8:10:BC:D7:B4:6C:F9:31:A7:6B:66:22:1B:B5:EF:ED:CD:3B:0B:9D
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 0197B5C526BCE14F84C8038A6BED4C62DBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 0495
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: sSk2TFvLUOUyG9c809G3tiY7yagm70tL17PBZ/PjLrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:26:bc:e1:4f:84:c8:03:8a:6b:ed:4c:62:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=a810bcd7b46cf931a76b66221bb5efedcd3b0b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:b1:d5:e3:c3:9e:b5:8d:bf:2c:f8:a5:f3:
aa:cd:c8:60:b7:6d:62:11:82:70:6e:4d:61:42:89:
29:4e:fc:70:cf:15:98:9a:58:9f:22:e3:e1:c2:d4:
21:a8:c1:92:1b:1c:44:07:71:39:e6:ba:d7:cb:08:
39:21:10:02:60:50:91:eb:30:5d:ef:90:32:b3:72:
be:fa:3c:b7:10:c4:5e:bc:11:f4:af:ab:92:44:49:
c0:d9:f9:5a:71:e8:4e:e4:a6:6a:95:ce:55:c5:a0:
46:d0:9c:82:3a:86:b9:69:9a:25:d2:70:87:9a:63:
4a:93:c1:19:80:cb:f5:1c:21:3c:b7:8c:b1:ab:94:
21:b7:7b:8f:2c:9a:38:d7:12:56:8b:c5:cd:dd:55:
99:56:74:f5:bf:90:51:4e:6d:f6:28:36:c4:28:dd:
87:14:ba:a7:dd:f8:b3:87:a9:b5:e6:f5:61:20:18:
cb:80:0c:a1:29:d9:fd:4e:9a:c6:f9:41:5c:73:dd:
6d:91:6c:1c:e7:00:6b:f3:4c:04:e4:de:04:51:8f:
55:4a:55:9c:d9:b9:ae:b0:9b:b1:58:6b:2f:be:f5:
72:7a:a1:74:f7:a2:5d:78:07:f6:cf:59:b3:2a:46:
47:9b:17:67:88:09:c8:f1:41:4f:a0:ab:3d:98:90:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:10:BC:D7:B4:6C:F9:31:A7:6B:66:22:1B:B5:EF:ED:CD:3B:0B:9D
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5f:92:15:86:29:52:08:ab:24:89:e5:dd:de:6e:a8:97:2d:
d0:b6:81:fb:7e:ed:83:d5:e5:f2:55:ce:bc:59:6f:df:e9:d9:
b4:8b:fb:6f:ed:14:88:44:f7:e7:98:1a:b2:68:6d:a3:53:c3:
72:de:b3:c3:e3:74:ef:83:49:73:d8:2f:90:76:c3:38:50:14:
e8:a3:0f:5d:3d:62:31:0b:14:34:a5:a5:67:5d:d9:39:e3:be:
46:7c:9f:b5:02:f2:1e:e6:e9:62:43:3c:1a:cc:8b:4e:cf:a9:
96:da:b6:63:4a:fb:88:6a:40:9e:6d:d1:a3:20:32:27:13:11:
60:03:c4:59:fd:b8:00:74:2e:46:10:81:3d:ec:ad:5c:37:70:
4a:a1:f9:92:c5:db:0a:5f:0f:58:e0:58:04:c8:cc:f4:56:eb:
69:ab:ca:92:d4:e0:de:11:8a:59:b5:22:4d:0e:0f:ed:e4:fd:
f8:55:ee:f8:61:50:e6:e8:75:4f:75:7e:38:71:c5:66:2b:84:
90:02:54:0f:5a:a6:95:98:f7:ea:c3:d3:e8:17:b0:26:3c:21:
7a:0e:8c:70:da:63:c1:10:38:34:0d:de:f5:c9:b0:ba:66:11:
48:dc:ab:26:cb:3f:8b:4d:7f:52:61:22:81:2f:34:e2:1d:4e:
4c:d0:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:26 2025 by rpki-client