Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: OCCku7nS8jA7JSS3tCnwvp++V3d2QUNrcgAhfp3DzxY=
Subject key identifier: 93:12:DB:FF:AB:71:BF:14:D1:FE:0D:83:A9:4E:A0:15:86:54:D3:81
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 0196BDEEAE8379261F3A725AE087AD5A717D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 12B7
Signing time: Sun 11 May 2025 06:00:58 +0000
Manifest this update: Sun 11 May 2025 06:00:58 +0000
Manifest next update: Mon 12 May 2025 06:00:58 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: 5sciAm7r20oJsxsRamFUusAp8o/OlGnuj7719kvaXcI=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:ae:83:79:26:1f:3a:72:5a:e0:87:ad:5a:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: May 11 06:00:58 2025 GMT
Not After : May 12 06:00:58 2025 GMT
Subject: CN=9312dbffab71bf14d1fe0d83a94ea0158654d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:99:2b:2d:33:4a:1a:c7:c9:7b:04:3c:72:
b6:1c:06:28:5f:e2:74:d6:cd:38:45:b8:f8:c8:8e:
a5:56:23:02:d0:d4:44:32:93:d0:31:6d:06:3b:cb:
d4:5c:7b:44:6d:3a:28:e4:b4:c6:a8:0e:89:89:ef:
65:84:6d:59:b2:fe:03:ee:80:af:3b:59:72:b5:6e:
4f:a8:ec:fd:6d:9b:6d:99:39:f4:f0:6c:8f:d1:f1:
11:80:a6:92:a8:ba:86:55:f9:58:d7:d6:12:99:63:
d2:e4:db:c0:cb:ee:e6:67:11:05:43:45:3b:9f:77:
5e:ec:ae:0a:10:ba:1c:7b:11:64:bc:fe:fd:da:3d:
06:79:62:fd:fd:ae:c5:1f:77:89:80:98:5d:9c:6d:
ee:56:13:ae:5f:f3:7b:fb:c8:fa:7d:57:10:ad:9d:
59:1a:8a:cc:74:44:82:98:a2:34:8e:7b:f2:3e:4c:
99:87:13:2d:81:96:7c:f3:e0:ad:17:4a:cc:62:44:
af:79:67:6c:63:4c:86:00:49:f9:a5:14:f9:6f:49:
d4:eb:96:5f:fe:3d:d4:54:2a:0e:36:af:e6:31:94:
11:3f:19:09:33:b7:ce:c3:8e:f4:db:f1:da:bb:11:
77:30:c1:c9:fd:73:82:d1:3c:7d:72:86:fc:8d:bc:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:12:DB:FF:AB:71:BF:14:D1:FE:0D:83:A9:4E:A0:15:86:54:D3:81
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:71:95:b6:fb:b4:30:c1:6b:a5:03:d9:0c:ce:9c:03:86:
8c:0a:64:31:14:64:88:b9:d8:50:34:99:31:99:f7:eb:8a:78:
75:13:07:5b:f1:c1:e7:00:55:d6:34:05:ec:b4:2a:81:f2:92:
70:5c:aa:5a:06:50:aa:12:6a:e4:a1:80:11:a1:68:a2:8e:ef:
ce:8f:2c:b3:b9:e9:81:b8:f4:6f:0b:d6:06:52:5e:4d:09:97:
ea:a5:b9:35:ae:84:f5:6b:1b:ce:bf:3e:69:f9:a9:83:01:15:
40:11:2f:57:ee:89:b2:1c:a1:7e:3e:e2:49:0d:b4:40:61:dc:
ce:b3:0c:cd:9e:99:78:35:fc:ff:9f:1e:d1:07:79:f9:22:da:
0b:55:c2:02:c2:1b:d5:5c:9e:bf:93:f8:fd:c3:90:d4:45:ad:
4a:59:fe:38:66:88:83:29:4a:b0:ec:00:e6:bd:f2:04:f8:60:
f1:f4:3f:b4:eb:12:11:10:6b:a5:5c:d3:71:f2:ff:ad:c3:22:
8f:42:ff:6e:50:65:66:33:37:eb:7b:cd:af:e6:a8:13:f0:78:
4a:47:ca:90:ac:6d:72:6d:b5:7f:e5:79:ff:aa:f7:5c:80:67:
e4:05:54:7c:13:ad:48:9b:86:2d:c8:13:8f:40:0f:be:21:a9:
2d:d0:56:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97q6DeSYfOnJa4IetWnF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh
Y2RiMDYwHhcNMjUwNTExMDYwMDU4WhcNMjUwNTEyMDYwMDU4WjAzMTEwLwYDVQQD
Eyg5MzEyZGJmZmFiNzFiZjE0ZDFmZTBkODNhOTRlYTAxNTg2NTRkMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzKZKy0zShrHyXsEPHK2HAYoX+J0
1s04Rbj4yI6lViMC0NREMpPQMW0GO8vUXHtEbToo5LTGqA6Jie9lhG1Zsv4D7oCv
O1lytW5PqOz9bZttmTn08GyP0fERgKaSqLqGVflY19YSmWPS5NvAy+7mZxEFQ0U7
n3de7K4KELocexFkvP792j0GeWL9/a7FH3eJgJhdnG3uVhOuX/N7+8j6fVcQrZ1Z
GorMdESCmKI0jnvyPkyZhxMtgZZ88+CtF0rMYkSveWdsY0yGAEn5pRT5b0nU65Zf
/j3UVCoONq/mMZQRPxkJM7fOw4702/HauxF3MMHJ/XOC0Tx9cob8jbxpawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMS2/+rcb8U0f4Ng6lOoBWGVNOBMB8GA1UdIwQY
MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt
MDRlNmY1NzY0YzUyLzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy
LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNlxlbb7
tDDBa6UD2QzOnAOGjApkMRRkiLnYUDSZMZn364p4dRMHW/HB5wBV1jQF7LQqgfKS
cFyqWgZQqhJq5KGAEaFooo7vzo8ss7npgbj0bwvWBlJeTQmX6qW5Na6E9Wsbzr8+
afmpgwEVQBEvV+6Jshyhfj7iSQ20QGHczrMMzZ6ZeDX8/58e0Qd5+SLaC1XCAsIb
1Vyev5P4/cOQ1EWtSln+OGaIgylKsOwA5r3yBPhg8fQ/tOsSERBrpVzTcfL/rcMi
j0L/blBlZjM363vNr+aoE/B4SkfKkKxtcm21f+V5/6r3XIBn5AVUfBOtSJuGLcgT
j0APviGpLdBWsg==
-----END CERTIFICATE-----
Generated at Sun May 11 15:20:28 2025 by rpki-client