Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: fgAyNublpRnn/rACbANZTIBi1STK2+nRb0vyQkyFaR8=
Subject key identifier: 4D:E2:54:29:F3:C9:E9:D7:4D:BF:05:AE:E9:B9:02:86:67:C1:70:AF
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 0198D4E01D4A037A6A0BC62048C5192AABBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 13CC
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: cBj3eNbi1/8eE1UN6FcTV/41rTFCziI3O8oQjW1l7Co=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1d:4a:03:7a:6a:0b:c6:20:48:c5:19:2a:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=4de25429f3c9e9d74dbf05aee9b9028667c170af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:c7:df:97:7c:87:2f:97:3a:8d:f2:78:46:
ad:0a:ec:f4:13:b4:9c:64:82:03:84:36:de:03:2a:
6b:1e:6a:de:19:ca:d4:a7:78:5a:5a:6b:c2:6d:b3:
e0:c2:da:ef:89:89:27:14:e8:72:3c:95:43:81:ec:
2d:9a:f2:2d:ed:0c:22:53:0d:9c:18:94:1f:6f:c3:
7f:e6:9c:7d:56:b6:6f:8e:95:a2:98:df:7c:81:b5:
9f:45:45:2a:13:c7:cd:13:66:9c:e7:bb:bd:7b:53:
3c:59:30:69:0f:79:04:20:5e:f6:c0:79:ec:57:88:
90:b1:90:49:db:48:b9:18:61:a3:d4:36:c9:57:af:
60:b2:5c:87:a7:dd:26:7c:53:4d:77:b8:b1:19:3e:
7b:2e:ca:25:a8:67:5e:97:43:cc:e0:d2:df:4d:b8:
b4:01:3f:c2:4a:f5:83:dd:cb:f5:6f:4b:46:22:71:
40:0a:75:4a:ab:91:00:44:85:0e:07:81:30:50:29:
de:65:92:aa:74:ba:6f:cf:aa:34:70:b7:4f:e5:81:
99:83:8a:76:e5:60:f3:22:ef:32:4a:1d:95:14:13:
e4:b5:7b:15:cd:e8:af:77:c7:de:b6:b1:a8:5d:1b:
4b:6d:6f:94:66:10:d6:72:3f:65:1e:24:30:d9:9d:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:54:29:F3:C9:E9:D7:4D:BF:05:AE:E9:B9:02:86:67:C1:70:AF
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1e:98:ee:44:d0:de:1f:d6:23:02:f3:90:29:ba:34:6b:81:
b1:70:f5:a0:c3:2d:7b:92:52:0f:8a:4f:64:d4:ce:89:ba:19:
61:a5:1b:e4:f2:c1:50:3f:7a:6e:87:4e:a9:b1:f1:30:7e:5f:
b5:0c:a3:09:dd:f6:32:9d:02:d2:72:ab:10:55:24:7e:c7:8b:
71:c3:54:fd:ad:a4:28:10:fd:d0:2a:8d:be:19:e0:eb:db:50:
5d:a0:49:2e:ae:51:5a:af:2f:10:a0:40:33:f5:f8:d4:be:33:
69:dc:65:9f:9b:e9:3f:00:23:3c:2f:f7:76:b5:c2:61:4a:21:
d9:a8:fc:d9:32:e2:00:99:d1:b7:8f:59:9a:1f:fc:da:64:6b:
45:30:cb:57:a7:2f:81:98:d2:8e:3d:a6:a3:7c:2b:d3:93:1f:
86:e5:c3:2e:7a:da:29:70:1f:8c:23:eb:e8:a2:14:30:3d:7b:
37:8c:25:77:0b:55:50:4e:71:2c:1a:f4:59:76:d3:ac:6b:5d:
45:5d:90:f1:73:0c:68:5a:0c:38:21:6e:34:09:61:c7:88:56:
c6:f8:1f:c3:b6:c8:f2:37:55:59:7e:cd:bc:07:77:8d:4a:12:
17:9f:29:b4:fb:ac:98:06:69:a1:88:a9:d5:a5:59:4e:40:5f:
8e:8a:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:31 2025 by rpki-client