Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: 14H5FTwopgIVzzdQyBxt2ALnCOFzZW+OHrZEVXk6JGM=
Subject key identifier: 04:12:AE:9B:B3:D5:86:C6:43:D0:3E:E9:4E:C0:3F:AB:D3:5E:7A:04
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01974AB157236449D40BC0D26B49DEC2F4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0A7A
Signing time: Sat 07 Jun 2025 14:00:25 +0000
Manifest this update: Sat 07 Jun 2025 14:00:25 +0000
Manifest next update: Sun 08 Jun 2025 14:00:25 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: QGMIvqBpY91cNk4jsDB41Mytaaq3B+AhC0XilRdJMDk=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:57:23:64:49:d4:0b:c0:d2:6b:49:de:c2:f4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jun 7 14:00:25 2025 GMT
Not After : Jun 8 14:00:25 2025 GMT
Subject: CN=0412ae9bb3d586c643d03ee94ec03fabd35e7a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:73:ab:aa:78:1a:66:be:5e:93:54:ad:58:
cc:d2:c8:ef:1c:a9:39:a4:b9:f2:e6:d4:2f:d5:c9:
49:bd:04:a3:32:26:32:fd:04:2a:75:94:3e:33:38:
23:96:8d:f5:3a:42:a2:d3:9d:bd:31:2f:b9:d6:32:
6e:fa:ed:e5:ed:a9:3c:be:c8:b8:d8:5c:fe:5f:34:
87:08:01:a8:9f:fa:67:53:e9:83:d9:a4:1a:d4:99:
31:1a:7a:d8:18:38:c8:f2:83:1b:21:bc:f8:79:83:
20:92:11:66:5c:7d:f6:0e:8c:2b:77:d8:58:be:d2:
53:78:9d:df:1c:29:9c:2b:7b:8c:c9:15:45:e9:b8:
0f:58:eb:c9:69:30:44:aa:60:eb:f5:69:2c:33:93:
81:13:88:cb:7b:54:28:7c:71:8a:29:6e:cc:4c:4a:
0d:fe:e1:0d:c8:35:82:15:1f:72:2b:97:cb:8a:ff:
e5:0e:2b:ec:01:13:88:96:da:c0:ad:ff:4e:29:05:
97:89:36:03:4a:5c:3e:c0:5d:d0:f6:d1:f8:c3:59:
f3:88:a1:19:0c:aa:13:ed:45:73:2b:dd:aa:3c:c7:
22:43:d4:d9:75:ed:eb:13:a5:83:f7:8c:cb:b9:03:
65:e6:ea:aa:b8:a7:78:99:e5:f3:64:01:76:bf:1c:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:AE:9B:B3:D5:86:C6:43:D0:3E:E9:4E:C0:3F:AB:D3:5E:7A:04
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:0d:bf:fc:34:37:54:ea:76:7d:a7:82:6e:59:06:10:63:
27:79:3a:ed:ef:79:e7:91:f7:33:e8:9d:57:3b:46:67:60:f2:
a5:41:c7:46:db:6e:c5:b9:2e:73:ed:74:07:c6:ba:18:25:49:
c1:f5:04:fc:64:56:2d:93:16:ac:64:91:1e:06:26:1e:20:81:
b3:de:94:4b:d5:cc:2b:e5:17:23:74:1d:c9:36:bc:4a:4d:89:
03:0f:36:fd:60:b5:cf:5e:fe:3a:93:61:db:5c:14:98:52:e4:
b7:db:12:62:8d:e9:fe:c8:65:80:23:66:72:3f:68:bf:6c:bd:
c5:9d:11:0c:c4:20:03:62:92:e2:32:2a:c5:e9:c0:fb:6b:59:
54:e8:14:58:12:10:93:48:97:36:fb:82:51:a4:66:7e:5d:71:
af:5f:82:12:82:ce:a8:c0:8a:66:40:08:38:0d:65:c2:99:d9:
ab:9a:a2:fa:98:fd:80:a4:b8:4e:ec:33:a9:9d:a1:67:d8:e8:
2f:85:a3:5f:b6:b1:fb:59:68:fa:a8:5a:fb:13:48:97:fd:b4:
95:db:dd:28:57:4a:0b:64:d6:07:31:82:a9:a0:6c:a2:4a:e9:
2f:9e:34:d4:29:b5:fd:e7:0b:72:a7:af:88:8b:80:8d:c6:fa:
d3:f1:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:51:50 2025 by rpki-client