Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: yx/j6g1OkW5KY1q8+VFzOOv2ZZrq3N4JBE3mnG/nxPU=
Subject key identifier: CF:EE:84:4A:B5:E4:77:74:AC:47:F1:D1:0F:B6:F3:BF:13:46:3C:03
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019751C61357E52E4F2A24ADDA311D957C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0E90
Signing time: Sun 08 Jun 2025 23:00:24 +0000
Manifest this update: Sun 08 Jun 2025 23:00:24 +0000
Manifest next update: Mon 09 Jun 2025 23:00:24 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: FcH0RgzIPNZDJd50p2XziXNl178kzOtxKj+9QxXBYuU=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:13:57:e5:2e:4f:2a:24:ad:da:31:1d:95:7c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jun 8 23:00:24 2025 GMT
Not After : Jun 9 23:00:24 2025 GMT
Subject: CN=cfee844ab5e47774ac47f1d10fb6f3bf13463c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:48:a7:60:38:47:42:4e:a5:77:8c:3d:b4:
1d:19:60:66:a8:ea:c3:04:b3:7f:85:18:a5:4b:ac:
c5:38:82:42:f0:5a:51:f9:cb:bc:04:7f:3a:5e:1d:
3c:b2:7a:d4:69:09:bf:fd:92:8d:91:b6:37:9d:f6:
29:fc:4a:1a:54:66:7b:e8:bd:bd:02:67:50:a7:0f:
6b:6c:b3:4e:ff:58:09:15:34:5a:73:5c:d6:df:fe:
38:84:8b:86:14:58:16:0f:1d:c2:87:91:06:04:ff:
0a:28:5c:b1:70:7f:15:45:8d:19:0d:b0:34:f7:68:
69:b7:97:d9:c0:6f:2d:69:ef:8b:29:fe:ed:8d:3c:
6a:d9:68:ee:33:3f:0f:a2:bc:43:02:2b:d7:3e:79:
5a:f4:f2:9d:4a:0e:20:ff:f5:ed:07:1a:2a:a5:2b:
88:6e:53:84:11:f9:4b:da:b9:dd:73:d3:dd:62:6a:
59:d4:42:3a:89:1e:7b:51:b3:61:9b:a0:25:60:bd:
40:9f:54:0d:9f:81:25:13:fe:00:24:f6:7d:b1:57:
36:5e:fd:aa:a8:20:91:ec:30:1e:de:26:01:75:01:
95:7f:db:3c:f7:12:14:8a:bf:67:1b:1d:52:f5:67:
ef:a2:2f:15:c5:9e:0d:0c:bf:f3:4e:c1:b0:ff:15:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:84:4A:B5:E4:77:74:AC:47:F1:D1:0F:B6:F3:BF:13:46:3C:03
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:48:47:6c:f5:c7:04:7e:8e:3b:45:c8:f2:34:91:58:b2:88:
e6:b8:c6:7b:b7:2c:18:c0:96:d1:a3:2c:76:72:8c:69:85:34:
ee:4f:73:3b:92:97:0b:17:0a:d0:fb:5f:d7:8b:1d:5d:e5:23:
43:1f:22:7d:c4:14:bd:ae:c7:50:4c:52:31:73:b6:0c:e8:9c:
f0:a2:14:81:ed:5c:88:4e:d5:4f:61:76:04:8c:27:c1:3d:fd:
0f:ad:b2:e6:80:3b:3d:c6:de:a2:48:b6:41:08:2a:f3:c3:ee:
9e:72:a1:b8:51:9b:30:ea:1f:c0:2b:c7:8e:9e:ec:51:a2:20:
77:d9:79:8c:4f:a0:dd:91:16:1c:ca:c5:54:2a:58:cc:7e:7c:
9c:17:06:5e:8d:26:dc:dc:c7:37:8c:c2:08:0e:8c:d0:f9:d7:
7b:3d:21:94:52:2a:8a:c4:a6:0e:18:94:c0:d8:26:6b:c3:13:
3d:85:f5:9c:07:d8:06:99:58:b7:10:65:93:e4:f1:ba:cd:ea:
86:6e:34:4d:7c:2a:43:a6:ae:dc:24:e9:1c:46:36:52:64:b8:
6c:5b:d8:7e:51:76:87:56:80:4b:d6:89:6b:a2:b7:f5:fd:87:
59:59:72:61:55:3d:05:12:f8:56:45:c3:6e:38:99:11:12:43:
94:ea:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:06:52 2025 by rpki-client