Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: +LpytIJD7718URIq+rSwMrbREdYMiVBnA3NJlLDw10g=
Subject key identifier: D2:C6:94:31:2D:C9:F8:D3:B7:77:4E:4B:82:2A:69:24:D9:4A:BD:29
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 01974B56D2DB05A473C556F41F0D957F87B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 0EF8
Signing time: Sat 07 Jun 2025 17:01:10 +0000
Manifest this update: Sat 07 Jun 2025 17:01:10 +0000
Manifest next update: Sun 08 Jun 2025 17:01:10 +0000
Files and hashes: 1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: cNGn/BsB6D5zlyuOkhXPCERHuEAlrfuyhfOV1bP+uXU=)
2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d2:db:05:a4:73:c5:56:f4:1f:0d:95:7f:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Jun 7 17:01:10 2025 GMT
Not After : Jun 8 17:01:10 2025 GMT
Subject: CN=d2c694312dc9f8d3b7774e4b822a6924d94abd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:7a:2b:22:00:1f:2a:61:ab:72:59:b7:66:
e2:1c:51:86:87:f9:8b:e2:7c:1c:c3:4a:8a:79:06:
12:e8:af:fe:dd:cd:65:b5:cd:0b:dc:ce:17:b1:3e:
bf:3d:a8:e1:25:20:60:98:1d:f2:49:d5:64:08:8a:
75:f7:63:a0:e3:ad:c6:25:58:60:ff:61:c7:b5:43:
34:5f:bb:a5:07:23:61:25:48:19:4a:59:63:ab:e5:
5b:3c:46:1b:e9:c6:e3:e4:c2:c7:0d:c5:bb:1e:4e:
46:bd:95:b1:1b:f5:38:06:a3:9e:3a:5b:5d:5a:1b:
6f:14:e9:2f:d3:42:62:00:8c:27:81:a0:ec:65:c0:
38:33:85:eb:e8:02:4f:9e:0f:52:16:82:d8:1c:94:
9a:14:2b:91:7a:1d:c6:d5:57:35:b5:28:c9:12:c7:
79:15:c8:fe:7c:e8:30:1b:cb:58:47:47:92:52:a0:
d0:aa:ab:b5:ec:3f:1a:24:37:df:98:d6:83:a6:c6:
30:1e:bf:3a:0e:00:b2:95:66:43:85:d1:d0:2a:7b:
83:b1:6a:34:41:d4:d5:6f:53:ca:e3:f6:05:46:4b:
69:b4:58:09:2d:0c:af:c4:90:f8:76:a6:c6:9d:eb:
c4:93:dc:16:4f:81:30:dd:3b:a4:ed:4d:5b:9d:1e:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:94:31:2D:C9:F8:D3:B7:77:4E:4B:82:2A:69:24:D9:4A:BD:29
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:cf:79:47:a1:4f:8d:fe:50:e1:d2:f7:e3:b7:e8:40:f4:
c2:13:cd:11:b5:b1:75:68:d0:ed:53:f4:87:04:97:4a:4b:eb:
a0:98:47:2f:cc:8a:6a:e8:0c:cd:6b:6b:d8:4f:bb:25:1a:9c:
2a:fb:5f:fe:01:78:bc:16:7f:31:23:eb:e9:41:a5:57:ea:3a:
c5:2c:dc:4f:b0:59:85:8d:75:3e:ba:d5:72:90:12:66:86:8c:
dc:c3:8f:25:7c:2b:ce:79:f4:0b:bf:70:2c:3f:50:44:32:ab:
15:11:cc:c0:66:a5:b8:c4:62:ff:4a:ed:6c:80:dd:22:cb:a4:
4c:17:5e:03:08:27:65:05:17:93:0b:ad:42:db:8e:e1:5b:43:
96:98:1a:bf:08:33:02:90:60:c5:c1:85:46:46:68:86:1e:e2:
7d:10:ea:33:92:4a:51:f3:d8:e2:e5:e0:86:fb:cf:e8:07:af:
42:a9:e6:bd:03:e1:6e:8e:f5:c9:ab:63:03:a3:cb:db:90:3a:
a7:63:9f:b6:cc:49:bf:d4:a0:44:b1:d3:12:a6:6d:2f:0d:48:
2d:8a:b9:9d:87:76:19:9a:e7:42:db:c3:bb:88:2d:df:2d:af:
34:60:9d:65:8b:d8:0e:d8:e4:b1:5a:a7:cf:2a:77:76:d3:46:
a4:c6:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:57 2025 by rpki-client