Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: CZYb0Ab7LQNYVSV+5+vxHLZiXGJoBF5wsuYsvjZT7Wk=
Subject key identifier: D8:8F:E5:6D:47:E7:D7:39:52:3C:21:A4:68:0E:15:CC:CF:66:99:07
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 01974FA0FFF3469EBAA6545F129743F84F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 13:00:40 +0000
Manifest this update: Sun 08 Jun 2025 13:00:40 +0000
Manifest next update: Mon 09 Jun 2025 13:00:40 +0000
Files and hashes: 1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: 50Vxu9fYprGuCNsl7+cgA+R4Hac82Aiik6IR9To5WHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:ff:f3:46:9e:ba:a6:54:5f:12:97:43:f8:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jun 8 13:00:40 2025 GMT
Not After : Jun 9 13:00:40 2025 GMT
Subject: CN=d88fe56d47e7d739523c21a4680e15cccf669907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:91:81:70:59:2f:52:c5:79:39:cb:08:71:
50:05:f9:ec:0e:68:38:92:9e:ca:d4:c9:83:b6:f3:
5b:73:e7:af:8e:d1:dc:5a:d9:12:1a:f8:e1:16:7c:
be:3b:55:96:7b:e3:8d:b6:3c:7f:4c:3e:02:ff:31:
5f:a6:ee:f1:28:2c:e7:e3:39:82:0f:b0:70:18:db:
b0:cc:1e:8d:f3:3f:95:eb:9e:73:14:48:4e:1b:04:
19:28:19:5c:fa:ba:8d:75:f9:06:82:e7:5f:1f:09:
d1:40:b5:19:36:7d:26:d0:4d:b1:e4:93:32:25:5d:
c8:77:8f:25:90:2a:45:11:f4:2a:be:65:7f:a2:91:
a7:fc:88:05:09:97:be:c0:44:1f:f8:53:56:86:cb:
f0:0e:28:26:ff:a3:cb:05:39:2c:fe:15:c9:ca:78:
1b:ea:32:3c:99:96:9c:70:ac:83:80:80:be:72:20:
8b:db:32:28:12:8a:8d:75:d6:45:23:f3:c1:ab:bc:
0d:9d:89:85:91:f5:21:6b:98:b3:dd:b0:89:8f:92:
e7:0b:f7:26:fa:a9:1d:e7:56:90:1d:82:49:38:f5:
55:10:54:99:f1:85:2d:15:6b:1c:85:f7:12:6d:d2:
e9:a9:35:8e:c3:96:34:5e:8e:37:1b:d7:13:68:98:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:E5:6D:47:E7:D7:39:52:3C:21:A4:68:0E:15:CC:CF:66:99:07
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:44:c2:6b:e0:16:35:26:5d:8f:cb:0f:17:bc:32:c1:b6:
74:55:49:2d:13:64:f0:4f:df:f2:25:bb:83:96:a8:a4:93:1e:
51:27:7b:72:cd:97:82:0d:2f:ab:6a:28:7f:17:a4:4f:8f:92:
73:fc:bf:15:aa:51:89:56:73:65:e7:f1:b6:59:7a:cf:79:eb:
8f:5d:51:9b:08:35:d1:ba:42:cd:e6:ad:9b:ff:c5:f5:a6:1b:
e2:94:52:24:25:0f:6c:64:b2:89:e0:3a:fc:e4:eb:ea:c3:5c:
3b:59:d0:f0:ba:2a:c9:ce:be:a8:38:7b:e0:1e:17:a9:c8:26:
a7:58:8d:fb:ab:0f:8a:46:e1:6c:25:d8:a0:57:27:0e:5a:2a:
2e:8f:d3:38:a7:6f:c1:64:89:8e:d8:d8:7f:43:c8:71:5b:d2:
4d:05:1f:50:0c:94:f0:e8:30:c4:67:26:44:3b:36:af:7f:08:
85:db:63:a8:5a:f3:87:8b:56:0f:31:5a:70:56:ff:2b:81:a0:
e6:97:41:7f:0f:b7:93:b8:1d:f6:95:31:e8:5f:79:0e:a7:b4:
64:2a:2a:37:35:d0:b3:0e:ab:2d:88:68:a7:33:7b:c8:1c:70:
41:38:14:a5:e7:40:30:89:53:60:76:c1:e0:76:44:70:07:81:
75:83:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:00:57 2025 by rpki-client