Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: UBi0yCLn2kgxX+bKKhui9W4st45oM4IpSDenZ8giKp8=
Subject key identifier: 70:6B:88:C6:79:45:F2:BF:C5:2C:14:1E:99:AC:A2:1D:DD:78:F6:32
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 01974D0E2DF3A07EA0EBD1BFB894A7354F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:01:04 +0000
Manifest this update: Sun 08 Jun 2025 01:01:04 +0000
Manifest next update: Mon 09 Jun 2025 01:01:04 +0000
Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=)
2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: Ud68u5+DEVfm4mReZrDT1jiXKhNaUEMnfR7hMTIk048=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:2d:f3:a0:7e:a0:eb:d1:bf:b8:94:a7:35:4f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Jun 8 01:01:04 2025 GMT
Not After : Jun 9 01:01:04 2025 GMT
Subject: CN=706b88c67945f2bfc52c141e99aca21ddd78f632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:13:b6:68:71:d6:34:f7:17:2b:6d:9a:3e:
1e:e7:90:c4:85:e0:58:1a:57:b8:7b:e5:40:b6:f6:
10:8a:40:cc:18:b9:e5:ab:00:82:a3:dc:7a:fd:73:
9c:a1:f6:88:fe:b6:db:22:d5:80:65:60:a6:45:41:
ff:ed:07:b6:c8:95:fb:35:9a:a2:40:bb:c1:a2:32:
3f:4f:80:cf:2e:72:35:95:1e:81:60:f3:ca:54:26:
61:ac:9e:fb:d0:f4:01:4c:51:85:48:4c:ef:d4:4d:
63:5e:f3:32:ff:c0:fc:83:05:a1:b0:c3:2b:d6:af:
8e:64:23:10:e7:b7:c2:ca:d8:89:9e:29:43:0d:8d:
0a:0d:0b:88:e0:0a:3e:9e:0a:6e:75:4d:ad:a2:f2:
d6:8d:50:92:b0:a4:5e:00:7c:7e:29:b7:45:c4:22:
25:2e:4d:1d:3e:f7:ef:ea:96:18:0c:ca:1f:60:bc:
d5:e4:7a:ca:69:53:c1:48:0d:9e:01:25:45:59:2c:
28:53:9c:d3:b6:2c:ed:3a:86:5c:7b:64:c6:8b:a1:
5a:74:81:31:50:6c:73:db:67:e1:69:60:11:a0:92:
45:f5:bc:41:94:f0:d2:52:a6:ec:03:db:c2:6d:56:
69:7d:b2:74:69:f5:f5:9d:cd:df:98:d1:14:5e:d8:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:88:C6:79:45:F2:BF:C5:2C:14:1E:99:AC:A2:1D:DD:78:F6:32
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:3e:ec:50:2b:72:5c:99:76:1b:db:71:ae:90:a8:29:64:
fd:f0:6b:5a:7e:0e:8d:3e:3b:e8:26:63:39:c5:50:ad:03:9d:
20:91:ee:8d:19:33:22:8e:66:42:4f:ec:57:9f:62:30:fd:82:
cd:e5:1f:8b:9a:7d:00:9e:17:f5:99:a5:9d:48:d3:b1:6d:4b:
d6:01:b9:64:34:46:5e:39:17:85:6b:e3:03:98:07:84:ab:b1:
a3:3e:f4:56:19:39:11:e3:1f:12:7c:07:ce:c8:aa:26:8d:68:
26:8d:5a:c2:4c:ba:5f:1b:1f:37:91:6c:4b:f7:07:30:5f:1e:
6c:f3:21:ee:66:cc:08:fe:22:7a:f1:66:a0:34:98:01:63:d9:
b5:1a:a1:96:34:03:67:c9:93:cd:54:7f:a7:78:91:7d:18:8e:
4c:c0:a9:a2:d3:57:02:4f:9e:66:0c:ae:2f:19:06:ed:a9:5c:
91:c7:6e:36:aa:4a:32:b8:3e:9a:a2:c6:7d:6a:06:2c:c8:d6:
95:c3:6e:a6:2e:35:b2:33:7e:83:8b:39:0d:c9:20:ec:8e:38:
12:6f:85:c8:fd:6c:25:c2:5e:15:cf:3c:61:a8:cd:97:48:3c:
1b:6a:5d:46:2f:97:be:aa:db:80:d4:5e:95:cb:16:de:38:63:
56:1f:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:41 2025 by rpki-client