Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: 9jt7K4FxVAQUlubU0B2lVOKhHQKcLpn6ItEzz29vIs0=
Subject key identifier: 70:14:D5:B6:B2:24:77:68:C3:3D:D9:2B:82:24:08:0A:69:BA:EB:72
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 019758360A466042D7964096934AF2A27A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 09BF
Signing time: Tue 10 Jun 2025 05:00:25 +0000
Manifest this update: Tue 10 Jun 2025 05:00:25 +0000
Manifest next update: Wed 11 Jun 2025 05:00:25 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: EpittxskztDcZfXdG72yGsngUDVqUjetuYuQkrwss3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:0a:46:60:42:d7:96:40:96:93:4a:f2:a2:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Jun 10 05:00:25 2025 GMT
Not After : Jun 11 05:00:25 2025 GMT
Subject: CN=7014d5b6b2247768c33dd92b8224080a69baeb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:b3:ed:36:15:15:b9:b5:77:2a:d5:29:40:
b6:43:4b:21:8f:24:c7:79:f6:91:27:5b:1a:00:b4:
82:14:b9:9d:87:77:15:37:8b:a7:09:6d:cf:fd:2d:
e3:43:c3:08:21:0c:2c:2b:f7:ca:2a:f7:d9:ea:09:
80:16:85:e5:42:95:48:8a:42:b7:76:a1:70:66:67:
9e:7d:52:a0:88:96:02:48:99:6f:1a:c9:f8:62:d7:
3a:5e:84:17:e6:40:61:b7:eb:00:09:68:f1:c0:68:
60:48:c5:b8:82:93:76:e0:ba:68:22:21:fa:d2:bd:
e3:47:6b:e5:b8:82:f9:00:d7:46:ce:2b:44:67:ac:
7a:56:30:70:e5:7c:bc:4b:f0:61:82:bf:c2:10:34:
1a:79:f5:a0:22:a7:57:a9:f8:98:78:96:eb:2d:9b:
e6:e5:5f:f2:00:37:d1:3f:68:ea:a6:b1:12:80:8b:
b3:5a:c3:32:2e:96:59:a1:08:e5:77:79:f3:b5:87:
fd:14:4d:ba:02:c9:16:cb:26:80:20:2c:94:01:0d:
a5:61:77:0d:ab:4f:d2:1b:4d:54:a7:4a:ef:3f:17:
bf:a9:b8:8e:fc:52:e5:76:46:2a:73:b0:04:f4:aa:
a4:bd:ce:b9:88:fb:85:16:75:fc:a3:0f:98:ae:9e:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:14:D5:B6:B2:24:77:68:C3:3D:D9:2B:82:24:08:0A:69:BA:EB:72
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:80:7b:f6:ae:a0:cb:ef:b4:01:8a:10:74:7c:d7:21:79:aa:
f2:97:bf:35:2b:95:fa:07:06:a4:9d:bd:3f:7c:1e:cd:ec:be:
32:39:78:b0:2f:33:52:73:e7:8b:93:1c:a3:e4:38:d1:bb:b7:
4a:4c:e5:0f:94:39:10:5a:ce:af:ce:2e:b3:a9:d4:72:03:03:
30:fe:5b:31:3f:25:64:02:a5:6a:1b:dc:b3:7b:15:a0:27:d7:
12:c2:0d:ce:f2:7c:12:e6:8e:fb:e9:4a:7c:9f:79:c2:5e:04:
9c:66:2d:58:22:87:8d:1a:05:fe:15:c0:60:74:27:8a:a4:49:
bf:8d:d3:57:d7:b0:4c:65:96:e1:11:79:6e:32:64:a2:ea:3f:
5c:07:45:89:56:66:76:a1:06:78:0e:92:e1:e7:94:96:b0:74:
f0:57:07:7c:f8:7e:8f:93:2d:a3:6e:5a:26:9e:4a:2a:48:50:
57:0a:ff:de:c2:73:8f:ce:a4:e7:73:9d:10:f0:7c:ac:71:d0:
28:f7:c6:65:1d:37:ca:7e:fb:95:61:09:c1:44:c7:24:e9:be:
dc:ab:b8:2b:15:b9:64:4e:99:7b:a5:6e:90:3b:58:e3:77:53:
4b:70:2b:76:79:48:d6:d2:2e:49:f2:dd:bf:9c:e4:65:e2:8f:
9f:74:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:27:42 2025 by rpki-client