Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File: jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier: IQxYU5at9RZIdC4oe0KXGLCZJQLd9RVFIyXgaqHUD+8=
Subject key identifier: 3E:BB:B7:0B:46:58:CA:B0:42:C4:8B:F6:04:15:1A:A2:10:7C:C4:4B
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 01974E8E8CBE7A8F051DAB88ACDC6D29F3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number: 12ED
Signing time: Sun 08 Jun 2025 08:00:54 +0000
Manifest this update: Sun 08 Jun 2025 08:00:54 +0000
Manifest next update: Mon 09 Jun 2025 08:00:54 +0000
Files and hashes: 1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: EsM95qKxJThH2z8R3lqmlKpGwAzS8rLK+L/klvIy5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:8c:be:7a:8f:05:1d:ab:88:ac:dc:6d:29:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: Jun 8 08:00:54 2025 GMT
Not After : Jun 9 08:00:54 2025 GMT
Subject: CN=3ebbb70b4658cab042c48bf604151aa2107cc44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:72:76:75:e4:92:88:9f:bb:ac:e9:c6:b7:
2a:95:23:41:d2:39:43:8b:df:b7:b6:84:e0:1c:25:
82:8c:3f:9e:35:a1:64:9b:31:a1:f1:c0:82:0a:75:
2b:bc:97:40:02:57:e3:3f:43:a1:5c:09:f4:dd:a7:
3d:00:99:72:dd:41:8d:94:28:00:a5:0b:00:8b:1c:
4e:0b:fa:d3:f5:8e:7e:c0:3b:21:89:93:94:d8:c3:
65:2a:97:60:cb:41:38:fb:ec:89:ea:05:0e:0b:10:
5e:64:b5:14:5d:a9:83:8c:cf:20:16:1f:92:ce:43:
dc:2d:a9:3e:13:c7:bd:74:20:7f:1b:ac:10:d3:85:
03:ab:09:f4:09:46:01:7d:45:f9:2a:8c:60:82:ad:
d0:b2:f4:14:5d:77:6c:d0:1e:34:35:a0:00:96:f9:
3e:d3:7b:9b:b0:1f:90:d5:2c:e5:1f:6a:14:e1:40:
56:14:f7:2d:f8:80:d0:4f:68:19:92:ae:48:90:ea:
9d:4f:83:74:0e:c5:da:b8:8d:d5:d6:e2:b0:fd:16:
e8:af:5c:08:3b:73:62:df:c7:8c:16:88:82:4d:7f:
aa:21:44:40:ea:f4:49:98:dc:3f:00:69:77:57:4b:
d3:8c:fa:7f:2a:f4:41:23:97:e8:1d:ca:9d:44:49:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:B7:0B:46:58:CA:B0:42:C4:8B:F6:04:15:1A:A2:10:7C:C4:4B
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2c:86:ad:27:6e:ac:88:03:f3:39:c8:36:66:71:5d:25:2f:
55:6b:2a:55:a3:cf:d6:b1:c1:3c:de:5d:1f:38:eb:d2:54:69:
fa:c2:c9:db:4c:de:fa:3d:1d:2a:52:f6:73:d1:f3:6c:d8:df:
d8:90:10:ad:65:b6:b7:93:7b:7f:8c:48:87:8c:c5:9f:33:ee:
ec:dd:b6:e8:11:e4:8b:59:ea:69:ba:78:c9:46:d0:cc:2b:b8:
c0:67:5f:6e:33:43:8b:81:b6:f6:1f:e8:21:e4:94:16:d8:52:
f2:93:b7:cc:50:28:18:33:d1:3d:7c:2a:8b:9e:4d:9e:ce:32:
b2:3d:b4:19:02:61:3c:09:aa:11:e5:31:6d:8e:fc:3c:12:bc:
1d:a3:c2:df:6e:46:a5:21:fc:9d:49:6c:24:a8:fa:fb:64:19:
34:d7:41:bd:75:43:b3:5c:85:29:da:fd:df:0e:57:ed:8e:8c:
17:d3:8f:e9:cd:c7:72:1d:f2:b4:bb:ca:af:e5:8d:04:93:ae:
0c:de:24:df:94:9b:90:e1:ba:0b:66:c8:e4:11:0c:2f:ed:ec:
13:93:d8:3b:8c:b6:e3:90:f3:d8:65:34:5a:d6:31:e9:9c:92:
09:04:34:5a:f2:f5:9b:cd:a7:61:43:1b:00:f3:fc:9e:cf:eb:
28:b9:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:08 2025 by rpki-client