Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: cuaHDwv1RtnrRevwzDOM3z9Y1EuBNniRid6g+RKeodY=
Subject key identifier: 73:44:BE:B0:35:81:C0:B4:7A:BB:7B:76:D6:D7:D7:E5:E3:4C:C1:FB
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 01974A436DB634A5439CD5926E168DA814EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 098B
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: nPnD7tqgVEFoPwKBhl41a5vTnB8FuAK/NtTxgjnMZSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6d:b6:34:a5:43:9c:d5:92:6e:16:8d:a8:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=7344beb03581c0b47abb7b76d6d7d7e5e34cc1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:7c:dc:7e:e7:ab:2e:55:5a:2e:94:d6:bb:
78:19:f5:07:d3:4a:23:27:8e:34:74:a2:95:14:7b:
1a:29:6f:6c:4d:53:12:f7:3c:a3:34:5e:fa:4b:19:
82:82:c6:6f:b5:91:34:ce:5c:2a:c0:b6:13:0f:e3:
12:33:7c:42:93:9d:1d:3b:79:f9:26:bb:7d:2f:e5:
62:54:6c:63:9f:a3:91:1e:01:2e:9d:a5:1a:d1:97:
24:43:75:17:ff:a7:41:23:f1:8a:19:02:84:44:a3:
95:eb:49:d7:99:e1:e9:5b:76:cd:45:dc:2b:4b:8e:
fa:83:95:cf:96:af:aa:b7:e8:86:fc:a8:73:f6:50:
80:0d:ae:94:96:6e:4d:f1:58:50:4b:9f:43:1a:8d:
64:d0:ee:2f:1e:e0:12:2f:df:17:a4:e7:23:a9:03:
88:7a:b1:32:ff:78:97:e8:e7:c4:c5:e3:b8:fa:39:
2f:8c:97:c3:81:6d:51:0b:c1:d1:ec:cf:d2:02:a3:
1c:86:dd:13:dc:6e:2d:a1:c0:7c:b7:c8:57:68:e4:
dd:d3:59:22:5c:46:83:94:5e:06:fa:fa:c0:73:48:
16:46:45:d0:df:00:e7:16:fa:50:e7:95:42:12:bc:
bb:e4:a9:18:06:fa:38:29:f3:9b:c4:b1:5f:60:70:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:BE:B0:35:81:C0:B4:7A:BB:7B:76:D6:D7:D7:E5:E3:4C:C1:FB
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:f7:dc:72:14:5d:3a:c4:54:37:81:6c:79:98:41:4c:57:
97:05:5b:84:52:6a:04:83:a0:41:e3:7b:85:25:8d:61:e9:9d:
ee:5c:2b:28:c3:c7:cb:ee:35:6b:34:1a:b3:14:fd:de:d8:f1:
1e:63:96:2b:64:2b:97:e9:1b:28:08:52:9b:dd:ed:20:5c:42:
42:4c:7d:7b:c3:ef:1d:69:95:c4:a7:5b:c2:bf:f5:10:85:28:
57:d1:ce:b4:f7:79:c1:7e:8f:b9:c8:3b:3f:c2:65:90:a6:2d:
71:4f:f6:23:9e:32:12:08:c3:a3:19:3d:f2:79:c0:85:c6:7a:
3c:d4:1d:69:01:0c:97:3d:ba:22:55:bb:ba:13:72:f2:29:54:
e8:d8:4a:8a:ea:36:18:fd:88:9b:b3:23:14:9d:29:03:fe:64:
14:2f:c2:ce:ad:fe:71:b0:2a:10:d8:be:b3:58:40:b4:0e:d1:
52:48:5d:97:1a:44:2d:6a:81:6f:ec:7a:2a:e5:c6:4f:a6:27:
3d:3e:1b:24:1b:5f:14:61:39:3b:75:f1:47:a1:83:f3:23:83:
ab:da:8f:55:c1:ae:d6:8e:bb:a0:20:0f:64:c0:a1:3e:dd:05:
fb:20:db:eb:b2:da:1f:dc:95:35:e6:b4:17:f7:0b:99:40:5c:
e3:04:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:56 2025 by rpki-client