Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: 2Fc9MyalrHhsziBX+kqk53vcpSm0aXtQtDb5VJKRbsE=
Subject key identifier: 2A:63:E3:D4:54:D3:16:F4:51:E9:ED:83:2E:45:9C:50:44:FD:C6:83
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 01974B8D93C8046A41E3D8996461D6578193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 109F
Signing time: Sat 07 Jun 2025 18:00:59 +0000
Manifest this update: Sat 07 Jun 2025 18:00:59 +0000
Manifest next update: Sun 08 Jun 2025 18:00:59 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: pnASMrtni/uH4WF9ekIijGiPAL3fUzcKv9ON2GeJk5U=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:93:c8:04:6a:41:e3:d8:99:64:61:d6:57:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jun 7 18:00:59 2025 GMT
Not After : Jun 8 18:00:59 2025 GMT
Subject: CN=2a63e3d454d316f451e9ed832e459c5044fdc683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:ed:27:17:06:bd:56:7e:25:cc:ab:16:11:
98:60:5a:8e:ae:ae:31:63:99:0c:a1:a8:11:77:fc:
eb:36:d2:df:db:65:01:86:99:0a:7b:75:e8:68:ad:
7b:e4:d0:34:76:72:f6:88:c0:00:b5:d9:91:39:e7:
56:1f:92:d9:c3:c5:c6:e3:17:85:4b:25:45:9e:a4:
24:83:36:1f:d1:ba:81:74:3b:48:ef:eb:ae:e7:5f:
7b:34:c6:d6:70:77:fd:81:13:c9:d7:11:5c:22:c1:
d3:15:e8:49:65:b0:58:9e:8d:ca:e9:a4:71:c1:67:
69:cc:88:36:da:54:ed:17:7b:a8:05:55:f3:90:b8:
35:36:78:62:2e:9d:78:9a:ec:6a:2b:23:59:69:27:
3e:1f:9e:6e:80:f2:78:e4:de:5a:c4:a4:b0:16:93:
88:fa:8d:35:d7:9f:44:ab:04:1f:5d:55:30:03:fd:
15:47:dd:66:2c:12:12:d7:aa:36:66:78:f4:19:c4:
85:84:e7:b1:b5:31:7b:26:df:68:43:8f:02:32:c5:
63:8c:0c:98:00:4c:07:32:81:e5:ca:a6:cc:c7:f4:
23:86:c7:8b:50:f9:12:a4:80:44:4c:6b:6b:fe:82:
83:00:76:b2:19:90:8b:64:66:04:25:00:7b:08:7f:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:E3:D4:54:D3:16:F4:51:E9:ED:83:2E:45:9C:50:44:FD:C6:83
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:e5:75:8c:07:bf:71:ad:0c:4b:3c:1a:e1:eb:77:40:fb:
ab:fb:88:dd:a1:1c:00:11:7d:51:41:74:d2:9d:e7:d2:01:f0:
2b:c4:1f:c7:66:0d:f4:0d:f7:d5:18:41:8e:be:59:ac:61:43:
55:12:5f:b9:45:21:43:2a:5f:27:fd:21:e5:2e:14:cf:11:28:
7a:06:dc:a7:8e:c0:bc:7b:15:a1:0e:78:5d:4f:5a:6c:5f:e2:
16:7e:4c:f1:d1:50:cb:b2:96:2b:7c:cf:63:3f:f8:97:a5:9c:
4e:71:25:a2:fa:41:12:1e:0a:7f:14:48:2f:e5:58:8d:33:a7:
f1:39:eb:9d:12:23:fe:e6:84:a1:cf:a5:bc:a7:a6:da:35:0f:
2c:04:4b:2c:12:4b:bf:28:3c:bf:1c:43:5b:34:28:87:26:00:
4c:bf:24:c1:14:16:8b:c3:cf:90:6a:90:c7:fa:ef:cf:11:bb:
b1:8d:10:0d:ec:8e:0c:4e:80:99:dc:72:95:cf:c3:7f:27:d0:
2a:e1:bc:e6:55:28:b1:bd:a7:97:cc:ab:65:45:36:60:f3:18:
e0:59:b4:0f:f8:ad:04:cd:ba:a6:cc:bf:21:06:3a:20:de:93:
87:4b:95:07:af:21:32:be:f6:00:01:2b:33:e2:97:1b:c4:ea:
df:a5:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:32:54 2025 by rpki-client