Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File: rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier: Ze04vyGyWmPmMn9Pv9hSIadOBtAW+wmEeOrs2pUHvh4=
Subject key identifier: BB:6A:6E:3D:C2:02:DE:B7:B6:6B:45:F0:15:C4:E0:95:6E:11:39:C1
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer: /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial: 019749684F72CDA3020338CE629B80A3935D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number: 1509
Signing time: Sat 07 Jun 2025 08:01:02 +0000
Manifest this update: Sat 07 Jun 2025 08:01:02 +0000
Manifest next update: Sun 08 Jun 2025 08:01:02 +0000
Files and hashes: 1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=)
2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: a3PDNJMlqNV5S5izzgz+jlI5rLGWF53jJRZXKLD8rvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:4f:72:cd:a3:02:03:38:ce:62:9b:80:a3:93:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Validity
Not Before: Jun 7 08:01:02 2025 GMT
Not After : Jun 8 08:01:02 2025 GMT
Subject: CN=bb6a6e3dc202deb7b66b45f015c4e0956e1139c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:54:61:3f:d8:8d:9e:db:a0:13:7d:c5:a9:
e5:af:d2:5e:56:ec:78:74:fd:ae:dc:cb:00:79:41:
7d:73:86:3c:51:91:75:47:d7:84:05:59:4c:b8:c1:
1b:fd:72:d7:1c:cc:85:db:7a:62:36:27:d7:fb:63:
47:93:34:19:1b:d9:6a:88:6e:9d:af:24:dd:56:47:
ea:e5:32:0b:7d:f1:fe:56:d8:0a:1f:6e:da:e1:fa:
ca:58:3d:09:6f:2f:9a:47:cd:01:f2:e8:1b:65:cc:
64:ff:fe:2c:de:52:59:83:e0:aa:b8:56:2e:45:34:
40:e8:eb:d9:a5:05:28:2e:33:9e:db:3d:ce:9a:10:
da:a2:95:3a:04:c6:00:9b:e5:40:d8:ae:86:7a:da:
eb:88:d5:9c:62:67:40:ee:90:52:5a:d1:a9:fe:9d:
1e:7c:5a:e6:44:e2:ac:c0:0b:8b:96:bb:f9:98:89:
46:42:c6:05:82:eb:0a:f4:31:cd:d8:63:4e:f2:c7:
98:a1:75:27:09:15:f3:f2:bb:f1:6c:28:c6:ea:ad:
0d:7a:61:60:a7:47:5e:0a:0c:04:d1:b5:a6:5e:4e:
d4:99:88:c5:11:37:e2:4b:2d:47:e2:13:15:b0:b2:
cb:0b:75:89:26:59:7e:31:65:82:d3:63:18:01:30:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:6E:3D:C2:02:DE:B7:B6:6B:45:F0:15:C4:E0:95:6E:11:39:C1
X509v3 Authority Key Identifier:
keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:96:c8:70:55:e7:b2:8c:5c:00:66:8a:74:40:66:a7:c3:
c0:46:71:0b:48:52:09:a2:47:df:28:b5:35:60:25:28:dc:51:
5a:22:57:c1:f0:4f:fc:14:78:75:5b:19:2e:fa:f1:59:2e:4e:
66:c2:04:56:47:48:d6:da:23:68:8b:13:0a:27:5e:e4:74:a8:
9b:b8:4a:fa:a3:27:ab:7e:a1:c9:17:04:2a:6c:81:d7:e3:b0:
56:a7:4f:a6:64:25:df:41:c8:66:9c:14:ee:1a:79:66:99:c6:
52:4e:6c:27:42:ce:09:90:a2:fb:ae:5a:32:24:78:21:f0:ee:
c4:f1:19:fd:f2:ee:6c:a3:aa:5d:2f:01:dd:56:b6:2d:98:8d:
d0:27:55:04:93:a6:8a:cf:6d:7d:28:05:e2:01:8f:bb:1c:c1:
52:bc:e7:f8:ab:6a:be:22:9a:9a:54:8f:af:4b:72:d8:2d:ef:
7a:05:7c:1c:3c:96:b4:c0:af:82:d6:3e:0a:73:4a:21:14:8a:
77:48:7d:7b:1c:35:fc:54:a0:9a:29:68:5c:45:19:70:ad:32:
70:b2:02:8e:c2:03:66:e6:38:de:2e:f4:7f:3f:73:e1:42:a8:
04:97:79:17:b9:38:45:56:4e:86:48:73:e9:0b:93:ef:e8:53:
f3:66:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:03 2025 by rpki-client