Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: SzyrsDU5fPusraHkzz3gmMXCXI7mIAf4IFiWPIpblVA=
Subject key identifier: AC:3D:AD:26:31:AF:C3:0E:F3:34:0C:C3:68:66:B2:EE:62:16:96:ED
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019749317E43A54D22EE3C3D6F3D03E45203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 029D
Signing time: Sat 07 Jun 2025 07:01:09 +0000
Manifest this update: Sat 07 Jun 2025 07:01:09 +0000
Manifest next update: Sun 08 Jun 2025 07:01:09 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: 2TudTCtSQFhMDUCYk3dfmJBvx99aB+VZy/WHx06iMNk=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:7e:43:a5:4d:22:ee:3c:3d:6f:3d:03:e4:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Jun 7 07:01:09 2025 GMT
Not After : Jun 8 07:01:09 2025 GMT
Subject: CN=ac3dad2631afc30ef3340cc36866b2ee621696ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:25:0c:fc:f9:bd:85:91:96:f8:25:41:7e:
7b:d7:ad:dc:7f:bd:a4:69:0a:49:94:85:de:6e:f7:
13:dc:a2:d3:06:f5:d5:08:d8:8a:5a:61:44:b7:52:
de:8d:d5:c6:9a:8d:52:78:5e:e6:11:85:50:f7:b7:
13:ed:63:bc:af:c5:c5:cb:d9:7e:09:3b:55:7a:a1:
11:e5:be:a8:8f:5f:6d:99:c7:28:a0:ae:50:60:0e:
f1:75:d6:68:32:54:73:86:9f:bd:3a:81:a6:3c:24:
a0:c2:f6:17:dc:c0:07:17:14:d8:0b:75:b6:a8:b3:
4f:0d:d9:37:75:86:29:f0:28:5d:a7:6f:2c:15:ce:
51:5a:30:87:00:e7:f0:23:69:4c:5d:9e:e8:5f:35:
71:91:e0:3d:29:26:3a:e8:9f:68:67:80:8b:75:eb:
20:e0:33:ca:2a:aa:07:16:81:c5:b1:a7:1e:9d:44:
24:db:7d:46:35:40:40:9f:d5:7e:27:89:12:ea:30:
be:b8:ef:cb:1a:dd:5c:f4:59:26:de:0e:ab:85:22:
48:82:46:0f:51:66:d0:52:17:9e:3d:fc:1d:30:ea:
b6:7b:c7:b5:13:8c:dd:1c:aa:3f:26:67:87:67:48:
65:4e:f9:88:15:2a:5a:e7:03:b0:c4:7a:14:c3:9f:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:AD:26:31:AF:C3:0E:F3:34:0C:C3:68:66:B2:EE:62:16:96:ED
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1c:cc:2d:61:f7:63:6b:92:8f:d7:79:69:6d:a5:ad:2e:e0:
c8:6a:16:40:7d:87:4b:18:96:c9:9a:7d:3f:27:ae:98:91:2d:
8d:a6:40:43:6b:31:45:d8:3e:f8:0a:20:fa:c6:d8:cc:22:f7:
92:d9:be:cc:f8:ac:5a:62:6f:19:f3:35:b3:a0:87:47:7e:ae:
9b:e0:e9:26:4f:ef:7a:fb:f8:7b:ce:e7:44:66:ab:b4:b9:6b:
79:e2:a6:72:11:61:d7:48:4e:e3:f2:61:a2:89:ad:76:0e:8e:
1d:13:25:73:1d:78:7c:87:68:36:71:c4:61:5e:3f:56:f2:4c:
1d:c6:cc:8d:8b:bd:73:9b:c2:2f:8b:76:3a:f6:0f:6c:c8:b8:
aa:6c:19:d2:d3:f3:91:c6:56:19:c0:42:c4:9f:5d:fe:41:31:
1d:17:1a:c8:38:39:85:ea:16:71:d2:19:d0:53:bb:8f:87:59:
81:a7:83:2c:14:5a:ac:f3:89:c3:18:e5:d0:7b:be:ba:60:fb:
16:fb:cc:f9:f8:ab:2b:cf:51:ec:46:58:e1:65:75:b3:3a:7c:
0a:6d:17:68:a6:ae:fd:b0:d8:2d:e9:e2:4f:5f:67:d0:0c:fe:
2d:3e:38:8c:ed:c9:54:0f:c0:ca:c5:ea:15:43:11:77:53:5c:
f8:22:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:04 2025 by rpki-client