Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: IDnDp/SqzgqJLyFpcXLSJ/uc28Lfg+Nt2bkA4qayQMU=
Subject key identifier: 2C:E7:20:A5:FA:F3:6E:15:9C:BF:CD:89:5E:91:0E:9C:F8:23:55:7D
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 01974AB1B7E6F957BB52822E4EA51E7F7789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 14:00:50 +0000
Manifest this update: Sat 07 Jun 2025 14:00:50 +0000
Manifest next update: Sun 08 Jun 2025 14:00:50 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: 1GfdcKJCW0gB/QwDfun40p31s7drRRnZI42TciFUHdw=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:b7:e6:f9:57:bb:52:82:2e:4e:a5:1e:7f:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Jun 7 14:00:50 2025 GMT
Not After : Jun 8 14:00:50 2025 GMT
Subject: CN=2ce720a5faf36e159cbfcd895e910e9cf823557d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:56:cc:0b:54:14:2c:0b:a7:23:cb:db:75:
74:e3:29:9e:91:0a:b8:0e:69:97:05:89:c0:b8:30:
f5:2b:94:70:a8:41:16:f5:d2:f0:11:9f:bf:f7:1a:
86:03:c4:26:3d:5b:e0:f8:35:7d:23:b9:e1:f9:7d:
85:36:a2:77:5c:16:82:5c:84:75:58:81:97:fb:fa:
c6:04:ad:c5:6d:e5:cf:78:c7:96:87:49:6e:0d:9a:
b5:54:39:2b:ef:56:20:f8:45:93:86:15:89:7f:3f:
83:15:47:68:5a:7c:5a:ed:a1:af:0f:79:3b:2f:07:
36:74:d5:37:4c:f0:7e:31:eb:8f:0c:74:dc:90:c0:
88:05:b2:c6:d4:3b:a5:32:15:27:67:a1:cf:b0:7b:
73:c4:ff:91:28:0b:2e:4b:f3:b8:7c:6e:8a:f7:4c:
4d:89:fd:85:85:ee:bb:53:03:33:e2:ae:09:57:41:
ff:b4:4c:b9:ed:87:93:86:24:4b:29:c2:d3:8b:5b:
d4:af:68:15:59:5c:20:ad:60:33:19:d6:6f:74:4c:
e0:a6:ab:d7:2d:40:64:0f:37:a2:00:30:b6:eb:68:
5c:d3:52:b8:74:7e:79:a9:f1:c6:80:65:44:49:23:
4b:0a:91:2f:27:5c:56:0a:7c:e2:e6:7b:3c:69:54:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:20:A5:FA:F3:6E:15:9C:BF:CD:89:5E:91:0E:9C:F8:23:55:7D
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9f:7d:36:1a:1f:f8:a7:f1:1e:eb:bb:cd:b8:1c:8d:3a:8a:
b2:f7:a6:cb:2d:f8:48:19:27:8a:04:9f:b5:72:d7:06:94:3f:
36:fa:ce:75:97:2d:df:98:5b:5e:4c:e2:80:c5:0e:2a:19:d7:
bc:fb:18:7e:22:fe:e2:9a:99:e8:8a:4a:64:58:32:b8:b7:4f:
32:19:9a:70:5c:c2:c6:72:cc:54:96:9f:6e:a2:54:1f:9b:e7:
7f:7e:87:66:21:1b:ec:d6:a3:a5:83:f3:93:38:9c:e0:14:fd:
90:43:92:80:78:24:a8:97:e1:cd:79:88:e3:68:18:b5:d4:f2:
44:21:c1:63:65:18:6a:d1:a9:39:90:19:81:a0:a1:f3:f6:3d:
c8:67:b8:02:c9:59:5e:37:bc:e3:c1:1f:b5:24:b4:3f:bd:60:
ad:64:d8:c4:49:10:15:b3:7f:c7:f1:56:30:0c:4c:08:c4:80:
a6:af:84:c5:62:33:7f:60:09:e5:0e:e3:0b:0e:bd:2e:1d:f8:
f7:87:96:21:96:48:9d:6c:0d:5d:76:5f:c2:8f:cf:19:74:50:
25:30:bb:73:96:af:6d:c1:f3:c5:ba:81:2e:70:83:aa:a1:ca:
a8:6d:40:4f:6d:0a:f2:ee:27:7d:93:fb:fb:94:b0:fe:58:ff:
bc:e8:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:47 2025 by rpki-client