Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: zHt6EYnC8EUIkDU9cemfKCQ3t/4IYib8lL8HUym9DMw=
Subject key identifier: BD:05:23:56:66:40:8F:D6:B0:C9:8D:14:C9:9C:59:E7:AA:A4:D5:D0
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 01974CA02507118ECB56EA5A02EA8D7870FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: 02CC
Signing time: Sat 07 Jun 2025 23:00:53 +0000
Manifest this update: Sat 07 Jun 2025 23:00:53 +0000
Manifest next update: Sun 08 Jun 2025 23:00:53 +0000
Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: rRi5mvmPNnJWjaj8sR/9Cea6xRDQfy4ow8Vv0JPrIQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:25:07:11:8e:cb:56:ea:5a:02:ea:8d:78:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Jun 7 23:00:53 2025 GMT
Not After : Jun 8 23:00:53 2025 GMT
Subject: CN=bd05235666408fd6b0c98d14c99c59e7aaa4d5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:5d:bf:20:1f:5f:f5:d9:e1:e6:09:ee:24:
8b:98:2c:5b:d4:a5:ee:6d:11:46:de:3b:5a:72:a9:
d2:27:a3:1c:c9:e3:f2:c4:c4:07:1a:8e:ef:04:75:
58:2b:1f:f0:fa:71:36:85:53:94:bf:ed:89:b8:ab:
e6:cb:1d:41:70:42:4a:9e:9b:59:83:cb:e9:f7:fa:
9a:9d:49:b0:fa:11:e3:f1:76:7a:3e:7e:c5:ca:54:
54:00:07:75:91:a5:5d:89:17:4c:51:af:c2:39:5b:
63:08:af:27:ee:d4:f3:b8:fb:e8:68:c6:56:7a:dd:
c1:4f:f1:3e:94:7e:14:ab:1c:b3:28:75:63:29:8f:
f2:03:f3:29:65:f6:64:12:ba:f9:26:63:99:1a:85:
63:9d:72:37:d1:b3:57:d0:c1:ab:0d:54:1d:b9:c1:
d9:8e:96:2f:37:68:c2:32:e2:6e:2a:59:b5:3f:94:
2b:e1:74:19:25:4a:a0:f4:c9:0b:b6:27:b7:a6:2d:
c3:3f:84:95:c7:2e:16:77:92:38:81:04:23:17:05:
73:08:ca:48:29:33:28:03:73:4c:59:51:22:85:88:
c0:76:05:19:42:5b:a0:70:3d:32:60:82:27:47:ad:
3e:00:c2:01:b2:d2:1e:c4:d0:69:f5:4b:1c:69:36:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:23:56:66:40:8F:D6:B0:C9:8D:14:C9:9C:59:E7:AA:A4:D5:D0
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e2:6e:8d:8a:e2:f1:2b:6e:f9:d3:a8:ba:06:38:cf:2b:99:
be:57:ad:1d:21:c7:d2:ce:08:d9:77:5c:a3:ac:35:b8:a3:cb:
f1:99:46:72:06:c2:31:a7:c2:9e:3f:9a:f0:59:45:5b:2c:69:
60:a6:43:56:db:4e:af:89:32:d0:36:78:08:e4:c5:c3:e6:e5:
38:f1:3a:1d:ea:be:2d:7a:dd:12:5e:e0:07:4b:7d:7e:f9:fc:
61:eb:d8:d4:e8:d3:64:ac:59:94:e5:69:82:9f:c0:17:93:e1:
af:9f:dd:d4:d2:71:64:d9:b8:20:55:4f:67:89:a8:90:29:37:
0a:03:10:9e:51:62:cb:46:af:3c:ec:66:5b:a4:39:39:33:75:
8d:c8:3d:32:da:f4:32:43:0b:90:f3:f8:62:fb:f8:a1:d7:9b:
f8:88:4e:bb:9c:46:57:84:48:cf:e7:8e:0b:85:f8:40:06:10:
73:b8:c1:36:39:32:63:84:a1:73:0d:82:ec:ba:8b:62:85:de:
4c:0e:ff:2f:d6:ec:6c:a6:26:e6:46:4a:a8:a1:1a:42:e0:e1:
22:f6:c1:3c:31:ac:f5:35:de:de:ea:06:ca:43:1c:cc:f5:00:
8f:70:73:4d:d7:a7:06:eb:33:2d:b5:4e:84:96:7c:ea:ee:8e:
c2:b3:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:15 2025 by rpki-client