Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: SwyUP8K1ZJkLhNcYs8wBUCmaLjrm6MD0uldqbfBvSW8=
Subject key identifier: BC:FF:D6:90:B9:82:78:D0:8B:41:EA:95:7B:42:0A:4C:6D:23:74:3D
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019749D636F46B649AD25C772807DEFE4551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 104B
Signing time: Sat 07 Jun 2025 10:01:04 +0000
Manifest this update: Sat 07 Jun 2025 10:01:04 +0000
Manifest next update: Sun 08 Jun 2025 10:01:04 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
3: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: rdwsfKZA6MGe4H8qi2+OnL9OmlqCLItFojnc2m3pM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:36:f4:6b:64:9a:d2:5c:77:28:07:de:fe:45:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jun 7 10:01:04 2025 GMT
Not After : Jun 8 10:01:04 2025 GMT
Subject: CN=bcffd690b98278d08b41ea957b420a4c6d23743d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:1d:bd:04:b1:c5:9b:13:a3:f3:84:94:07:
fe:8e:de:19:43:38:e2:7a:a5:2f:89:08:d1:90:b5:
bd:69:65:e3:f0:89:df:f6:31:dc:71:db:f2:fc:14:
04:8c:87:70:c1:9c:c1:88:dd:28:f8:ff:a7:35:d3:
3d:59:27:47:f2:13:38:26:96:c1:47:fb:1b:31:5d:
2e:86:1b:5b:83:44:e3:ec:2d:ed:02:5a:e7:9b:f1:
82:dc:a7:23:6a:c0:b5:d0:01:5f:51:da:46:e6:8c:
48:f5:be:76:21:2e:bc:55:1f:99:fb:d3:6f:9e:e7:
99:1c:0d:3e:ee:6e:ba:bb:8e:bf:fa:ea:e1:6c:28:
c4:a2:d5:43:0b:14:a0:ff:b0:92:11:1c:19:5f:d4:
9e:46:ff:62:fa:03:91:16:71:ee:33:09:15:7f:a9:
c7:d8:6a:53:05:62:19:c1:6d:09:d7:8f:a8:62:35:
0c:99:13:b0:2f:39:39:73:be:77:5e:a9:d0:52:f1:
c6:a0:14:6b:2f:f9:55:2f:0a:2a:44:99:be:5e:cd:
87:26:b2:9f:8a:21:41:a6:14:3a:94:9d:6e:0e:63:
ed:44:ea:1b:15:02:13:fb:6a:32:19:52:61:64:c8:
4d:1c:ab:21:62:8f:c8:cb:2b:92:c6:10:72:6a:02:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:D6:90:B9:82:78:D0:8B:41:EA:95:7B:42:0A:4C:6D:23:74:3D
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:cb:72:93:16:4f:71:e1:ce:37:d7:79:e4:51:1c:3b:06:
05:a8:df:ca:74:a5:92:e4:e8:64:5f:60:4f:32:c9:c4:04:68:
07:4a:95:bb:2e:1c:73:06:bc:f4:c2:2f:16:cd:fc:f2:4f:48:
6c:e7:21:ae:28:0f:97:9a:1c:84:58:44:4c:a8:8a:37:9f:01:
9d:97:ac:44:ce:bc:ec:55:eb:ca:a4:35:a3:de:83:30:4a:8d:
03:33:d7:d2:8d:f1:ea:6a:16:59:a4:d7:7b:0b:f7:fc:bc:38:
ff:cb:00:f3:66:98:c1:1f:69:6c:9a:0e:80:e6:25:b2:92:5d:
44:ae:bd:31:37:62:95:38:ac:c2:eb:81:1b:95:ad:4c:7b:99:
5b:c8:9e:f5:61:d0:15:49:26:7a:9b:5b:15:3f:78:ef:5a:c6:
33:f3:63:cc:f8:61:e1:e5:cb:38:29:cc:67:77:5a:f9:e2:24:
d4:75:5a:35:b1:5b:37:83:4e:bc:a8:92:b0:83:ce:c1:f5:0a:
b4:8e:dd:98:c9:3e:2c:6c:6e:40:44:1c:99:f2:1a:36:38:f9:
8d:a8:9d:11:ed:30:e8:32:bb:37:78:ae:e9:3c:24:05:c4:d4:
f3:76:f2:70:a1:27:16:a9:a1:26:09:5e:63:8b:e4:28:bd:21:
0c:01:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:26:12 2025 by rpki-client