Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: K3I6mhpFteBFiZFkpdvmTWR9AfeFXjAEQpFJEdanPMM=
Subject key identifier: 30:2A:50:30:07:B5:DD:37:A3:38:7A:25:B5:8F:F3:71:87:34:0A:C7
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 01974A7A880C79E2BF10FDD3EA980D840EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 1217
Signing time: Sat 07 Jun 2025 13:00:33 +0000
Manifest this update: Sat 07 Jun 2025 13:00:33 +0000
Manifest next update: Sun 08 Jun 2025 13:00:33 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: Jrbys3LabNfwHER9KQuLpozDfJCyGLQm5sH/rfpSf8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:88:0c:79:e2:bf:10:fd:d3:ea:98:0d:84:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Jun 7 13:00:33 2025 GMT
Not After : Jun 8 13:00:33 2025 GMT
Subject: CN=302a503007b5dd37a3387a25b58ff37187340ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:41:fb:f1:0f:2d:15:a5:18:64:e9:93:c4:
fb:14:68:a8:20:77:d8:c9:e9:b9:8b:d0:aa:ae:5c:
5b:17:fd:03:59:c0:09:d3:6d:41:5d:f7:1d:98:4c:
47:e9:cd:e0:15:9e:1a:bd:1e:b9:e0:b5:da:28:3e:
e8:1d:3d:6b:cc:2a:14:98:48:09:3a:d9:d6:2f:75:
02:ee:e3:e4:d6:50:8d:62:38:ff:52:a5:c2:3d:95:
10:cf:41:ad:4e:21:e2:8a:0e:ae:35:10:79:3a:ec:
1f:67:36:2a:36:55:ba:35:cd:ec:fa:55:6d:59:c1:
31:9f:d1:3a:74:01:be:27:42:79:a7:02:6f:6d:f8:
b7:a4:32:32:e1:b7:c9:97:be:bf:29:74:ae:90:42:
06:4b:b1:ba:00:48:a1:e1:92:1b:e4:84:53:6c:82:
d0:3a:1c:06:b8:f3:18:1d:64:d1:1d:4d:86:91:c5:
0e:56:ee:ac:47:bc:27:6f:99:f5:31:9a:9d:86:81:
56:6a:54:d4:99:0d:db:65:96:4c:66:22:27:44:dd:
cb:89:93:90:ec:11:fc:d1:f4:28:16:60:75:3e:d8:
4f:5c:6c:fc:f3:49:cb:73:35:e3:f4:43:a4:62:71:
f7:f0:34:79:76:8d:c7:c5:f5:1b:c8:29:b8:6d:0b:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:50:30:07:B5:DD:37:A3:38:7A:25:B5:8F:F3:71:87:34:0A:C7
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:d7:18:4a:13:b5:cb:db:45:1a:fe:a8:c2:05:6d:a5:d2:
1e:07:3b:22:a7:ff:69:f1:cb:96:c8:ff:b3:a6:63:e8:8f:57:
eb:fa:f2:c4:26:b0:63:87:3a:91:26:cd:26:c7:b1:76:d5:22:
b1:45:fe:c7:a5:d5:01:bd:e5:55:6e:35:92:c2:3a:25:cb:bb:
e3:3a:50:06:66:94:81:37:0d:5c:7f:21:fd:0b:b6:0b:d9:52:
1d:d6:58:54:c9:ec:1c:60:c6:a7:13:03:6e:95:db:6f:dc:0b:
43:eb:f9:36:0d:6f:c9:2d:73:da:b4:29:d0:6b:66:6c:c2:ac:
1f:ba:a7:07:84:08:bc:78:dd:3a:be:5c:8c:5a:13:2b:dc:4b:
65:11:a1:1c:51:87:b3:b8:7b:75:9f:0d:ce:bf:c1:ed:23:91:
33:0e:b1:31:88:b2:83:e8:44:f6:66:fe:1f:4f:e3:ef:29:32:
90:8f:e4:26:5e:bb:bc:60:e9:62:cf:a9:70:67:57:db:a1:78:
56:66:68:b7:3a:21:07:c7:a2:8b:7b:a5:d0:c9:29:14:57:84:
cf:24:98:aa:39:cc:7b:0b:b3:42:53:04:0c:a3:b4:e0:b5:3a:
b2:55:9d:4c:a7:56:37:26:37:21:0c:28:b3:d9:34:8e:e3:cf:
9b:7d:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:18 2025 by rpki-client