Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: e4w7Qmf2+mBJ1+7r6zIkQm56VkMhI0v5wK/3pv5OAPQ=
Subject key identifier: 43:1B:9E:53:B6:A3:64:85:1B:ED:76:58:69:49:7B:54:A3:D9:25:BA
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019747E772FCB291491A137D6E660401AE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 12F2
Signing time: Sat 07 Jun 2025 01:00:39 +0000
Manifest this update: Sat 07 Jun 2025 01:00:39 +0000
Manifest next update: Sun 08 Jun 2025 01:00:39 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: Rs3FiueYd4eUfVSppOCii0coZ+vV5JUtycjwHnJYzb8=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:72:fc:b2:91:49:1a:13:7d:6e:66:04:01:ae:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jun 7 01:00:39 2025 GMT
Not After : Jun 8 01:00:39 2025 GMT
Subject: CN=431b9e53b6a364851bed765869497b54a3d925ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:17:a1:56:4d:d4:87:53:93:8f:8a:cf:5e:
6c:f0:b5:79:91:1d:83:85:5a:62:a3:f3:8c:7d:44:
42:33:35:5e:18:3f:43:af:37:56:7b:8e:93:7d:52:
c8:37:98:86:59:aa:cf:81:95:e1:f4:41:c0:a0:cf:
d4:86:ad:06:43:8a:05:7b:75:36:18:53:1d:92:a2:
89:fa:e1:65:d2:9a:2e:6e:66:b8:13:a9:47:41:54:
80:49:96:6a:8d:fe:7b:42:7e:2c:fe:7f:1b:a1:83:
04:c4:b2:4d:9a:35:e1:d6:7a:58:9f:af:0f:67:1e:
1f:6c:1c:4c:86:f8:0b:a7:8b:54:68:1e:6e:fd:42:
7f:00:31:fa:6f:3b:0e:bf:28:ae:f2:90:d7:d4:5f:
dd:81:12:c1:b0:36:f6:b8:56:90:2c:3a:e2:e3:25:
67:a3:78:79:94:03:32:64:fd:4b:59:47:ed:01:d9:
01:c7:1f:bb:1d:9f:bd:48:7c:cb:4c:52:46:7d:c0:
d1:3f:fd:cb:51:bc:62:88:5e:eb:5d:1c:a3:98:20:
41:1f:b6:bb:92:23:43:0a:fb:60:0a:74:4d:d8:91:
db:19:45:c8:29:fa:dd:78:b3:cc:a0:b2:d1:49:57:
d8:e2:39:1f:19:14:5f:fb:a1:19:81:78:2e:40:95:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:9E:53:B6:A3:64:85:1B:ED:76:58:69:49:7B:54:A3:D9:25:BA
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b0:86:87:15:ca:3d:22:31:6d:6a:9c:00:6c:6c:21:13:bb:
31:8d:79:04:31:6d:4f:07:82:04:d4:1c:ff:a9:f0:4a:af:4e:
73:a6:24:bf:20:53:5f:68:3c:b4:f0:1c:28:88:b4:0d:2d:a2:
1d:ae:92:e4:ab:12:63:be:09:57:09:2d:10:83:f1:6a:f5:52:
ef:cf:3b:a1:9c:dc:7f:b2:f6:3c:ad:68:b1:e7:0b:b4:72:08:
70:76:1f:b4:93:a3:7f:7d:78:fd:cf:ea:d7:83:0b:a8:88:60:
40:16:05:c0:87:62:14:2c:10:18:f9:2a:76:ce:95:e0:5c:a4:
e2:f2:48:aa:0c:bb:06:be:0e:40:c2:53:01:07:f1:13:83:e2:
ac:29:b3:a8:bc:12:08:a9:05:95:8d:24:49:34:50:f4:80:1e:
fb:e7:5c:1c:ab:61:74:21:f8:ab:58:47:c8:3b:d1:10:51:94:
3e:6a:74:f6:be:e1:76:67:7d:b7:1a:0c:7f:a5:7b:13:c8:34:
ce:22:73:57:de:ca:db:46:bb:7c:4c:54:81:49:d9:76:c8:ef:
eb:31:e2:61:d7:e9:8d:3a:80:60:ff:e4:99:04:ab:d1:e3:23:
c4:d2:05:f0:47:d2:aa:21:a3:e8:d1:57:29:03:58:67:df:b4:
e8:1e:00:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:24:15 2025 by rpki-client