Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: hd7lqX2JhA5L62laqnbw2SCuM33Bsg0Ozha30JzPPy0=
Subject key identifier: 8B:FA:5A:0B:3C:29:9F:8D:3D:D0:0F:81:6E:E8:93:FE:E5:12:4B:51
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 01976E198B160AC9B120627F000D762C32BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 013C
Signing time: Sat 14 Jun 2025 11:00:57 +0000
Manifest this update: Sat 14 Jun 2025 11:00:57 +0000
Manifest next update: Sun 15 Jun 2025 11:00:57 +0000
Files and hashes: 1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: i6ib8SOYvySSnlT0dkPlAWwQ0yI9Vm4kaL7birDmCOs=)
2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:8b:16:0a:c9:b1:20:62:7f:00:0d:76:2c:32:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Jun 14 11:00:57 2025 GMT
Not After : Jun 15 11:00:57 2025 GMT
Subject: CN=8bfa5a0b3c299f8d3dd00f816ee893fee5124b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:7a:d9:d6:f4:6e:b5:18:b1:f6:5a:c1:c1:
7a:0e:13:f7:5e:69:06:69:8d:d0:a7:99:89:06:27:
cc:a7:32:ac:e7:e9:1e:1b:0b:8e:18:39:41:d1:b6:
17:55:64:1a:22:be:b0:e8:5e:a0:d6:e5:9d:5d:49:
be:ab:49:28:d7:b7:e5:cc:bb:b6:f1:fe:ee:06:b1:
22:08:a4:5b:de:26:b9:22:37:c4:4e:e9:5e:de:13:
19:2a:89:64:11:90:92:e6:5e:74:be:b8:74:45:1d:
41:6b:45:3e:e6:9f:c1:73:6d:ce:50:cb:bf:3d:85:
eb:c9:4c:aa:b1:62:63:e1:e0:2a:a9:1c:85:59:45:
c1:e5:2f:35:3c:9a:66:c3:4d:14:c2:21:26:22:7e:
d6:e7:ab:ee:27:d8:1b:45:4b:d0:94:64:cd:cd:bd:
97:3e:37:0f:fb:53:d5:e1:e6:53:c1:60:5c:05:0b:
d3:c5:9a:ba:85:4f:5f:f3:6e:20:c8:2a:19:b9:60:
0e:79:eb:06:75:c5:ae:a3:20:8a:6f:f2:5a:17:e4:
be:b9:c2:f8:0f:55:ee:b2:fd:aa:b7:38:6e:c6:4d:
b3:97:63:75:ca:1d:22:4b:8c:a7:51:7d:b6:1b:57:
34:50:95:8e:ad:05:e6:6b:ed:48:f6:0d:52:da:7e:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FA:5A:0B:3C:29:9F:8D:3D:D0:0F:81:6E:E8:93:FE:E5:12:4B:51
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:9f:25:38:13:bf:0b:8a:ab:77:6c:d6:9c:65:7d:1f:4f:
ea:11:52:37:39:9e:0b:df:36:2d:37:2e:86:c9:3d:9d:f9:47:
1c:c2:16:d3:e6:cb:53:f8:7a:bb:85:75:e1:db:8f:3b:58:0f:
ce:1f:6d:c4:62:ce:fe:46:08:a0:81:a2:ac:59:b1:02:28:20:
66:b4:84:45:dd:c6:ac:96:13:c0:a1:7d:ba:ba:33:42:1e:62:
c6:4a:d6:fb:1e:08:6a:ce:7a:ce:f7:46:cd:f9:8e:6f:66:b7:
6e:a5:e0:3c:66:ac:b3:c4:63:04:d7:23:31:18:2e:1e:09:86:
8b:7f:c8:f3:a3:2d:fb:ff:09:15:1e:1d:b0:50:de:0a:f1:50:
fd:42:30:76:cb:cd:08:6d:0f:d9:af:11:0f:23:c8:95:c6:eb:
c3:7b:46:25:55:3a:f8:6d:6a:f7:ef:1d:0d:8d:9d:a9:9f:9d:
31:d0:74:c3:a6:47:3f:1d:bd:a0:ef:5f:6a:bd:6f:fa:19:72:
c9:f7:8e:41:8e:56:df:92:df:b7:9c:4b:af:17:53:0c:6d:27:
b6:1b:d3:a4:4e:2c:f4:61:e5:86:88:e9:af:a9:2d:27:50:7f:
19:12:d4:06:2f:f3:a7:d0:41:77:af:6f:5d:57:7b:d5:a6:5f:
e6:22:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:59:34 2025 by rpki-client