Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: SQqi+di38u8KJUNul15wA1BqAls3ZZeoT1u+z1LfdSM=
Subject key identifier: C7:66:46:4D:B1:C3:41:6A:B0:A3:A5:62:BB:36:D2:7E:78:FB:9A:D9
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 01974AB191609EB704FFCFC712F9FDDF7733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 14:00:40 +0000
Manifest this update: Sat 07 Jun 2025 14:00:40 +0000
Manifest next update: Sun 08 Jun 2025 14:00:40 +0000
Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: 1IFpFHb2b5pvi9jPSXsiqjJnwW3zf/giT01t9Y1VZ+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:91:60:9e:b7:04:ff:cf:c7:12:f9:fd:df:77:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Jun 7 14:00:40 2025 GMT
Not After : Jun 8 14:00:40 2025 GMT
Subject: CN=c766464db1c3416ab0a3a562bb36d27e78fb9ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:7a:b5:d6:00:89:8c:3d:be:49:7b:f5:0a:
8e:e9:be:f4:af:16:ea:70:3b:06:e9:9a:de:96:10:
cc:c2:61:49:64:20:46:32:bf:0d:45:dc:6a:15:3e:
bf:47:b3:ce:42:4c:30:b2:c7:dd:e0:92:67:bc:e6:
e3:78:a3:e9:c8:4d:8a:5c:b7:b3:b3:32:05:cd:21:
f1:fd:4c:d0:d3:64:80:aa:f4:ac:f5:74:fd:89:33:
a7:6c:2c:8a:e6:f1:ae:06:a3:ae:b1:6b:00:71:5b:
db:24:e1:32:be:4e:d8:1f:78:1a:07:eb:c1:62:3f:
7d:40:02:8e:04:b9:6f:ef:37:e2:f7:73:d0:49:86:
1b:08:a8:c4:7b:f4:c4:f0:66:84:9c:6e:36:b5:3b:
e7:4f:2f:6b:87:27:29:75:b8:33:ac:b9:6c:fc:74:
38:c3:ba:6b:fd:a7:ad:3a:4e:18:32:58:c8:8a:cd:
a2:55:e5:48:cb:14:5b:4c:36:33:79:f3:23:cd:c9:
96:fa:0c:d5:95:1c:b3:4e:b2:ec:27:c5:b9:e1:8c:
4a:06:e0:27:a9:fc:01:1d:7a:f0:b2:16:4e:b8:dd:
72:a3:e4:d9:ef:08:db:2f:65:de:96:a3:aa:63:35:
8d:1c:03:64:1e:02:78:88:a7:79:32:ad:6c:27:48:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:66:46:4D:B1:C3:41:6A:B0:A3:A5:62:BB:36:D2:7E:78:FB:9A:D9
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:f3:0a:ca:0b:a1:c7:04:12:0b:09:be:94:3f:d0:cc:fe:
02:57:9c:5e:63:1b:78:d5:71:6f:18:96:e0:f5:06:ad:7c:43:
fc:5d:75:75:37:98:4a:2b:84:4d:56:66:ff:96:3b:c4:a4:20:
67:98:05:79:42:fb:83:5a:5a:ec:ac:87:6a:c5:c1:f2:e4:f7:
ad:22:69:90:e5:01:00:87:16:e7:07:fd:a4:e4:ca:ef:a4:d1:
b6:b9:b4:77:a5:d8:67:be:78:14:7d:17:98:c9:ff:1a:5f:87:
c4:cb:d2:1f:69:5d:db:bb:78:ee:26:64:e6:f5:f5:09:df:67:
17:36:94:45:8d:dd:40:93:bb:5b:62:6c:c1:77:44:29:3f:a4:
9c:42:00:c1:8a:d0:26:fa:7c:39:6e:b4:d3:af:af:87:6a:2d:
ab:02:d3:2e:f7:c3:68:0a:f4:70:a2:1a:a9:d9:4a:a0:f6:d4:
d8:c3:0b:0c:b9:d2:cb:6d:f9:46:57:5f:c1:da:bf:ee:87:59:
34:5d:29:fb:b9:34:49:a8:84:41:0f:a4:a8:47:91:9e:7a:a4:
04:e5:1c:11:48:3d:2d:0a:c7:81:01:60:d6:b2:61:11:b9:c6:
4e:74:bd:24:e9:a0:e7:58:e1:c7:45:d2:d9:60:93:c3:7f:85:
92:01:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:34 2025 by rpki-client