Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: Tswy794JT/x3d9DE/WecrGh/5QNysYgARMwoi6S74ro=
Subject key identifier: 0D:C8:95:E6:FC:9F:51:EB:02:A9:06:6E:AB:AD:33:57:6E:53:96:C4
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 019754C7A7F1E9CBE9A3BF18B5651A62C540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 13:01:00 +0000
Manifest this update: Mon 09 Jun 2025 13:01:00 +0000
Manifest next update: Tue 10 Jun 2025 13:01:00 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: 1OPXmBNKfB6lzaReEmPqZ8REwrvzyC2M8dNdbtNTk8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:a7:f1:e9:cb:e9:a3:bf:18:b5:65:1a:62:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Jun 9 13:01:00 2025 GMT
Not After : Jun 10 13:01:00 2025 GMT
Subject: CN=0dc895e6fc9f51eb02a9066eabad33576e5396c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:8c:84:e5:fc:b1:d6:60:2b:33:51:5c:a3:
18:d2:38:fd:f0:82:90:ee:66:a8:8c:77:54:39:83:
d0:54:af:f8:b9:4b:40:d9:4f:26:27:cc:3a:1d:0e:
8d:f5:b5:40:64:71:a7:c8:84:b1:ff:01:64:61:7c:
bd:6d:98:b9:1f:be:8c:3f:19:a6:92:21:fc:4f:c1:
38:52:a7:05:74:46:ae:6e:78:f8:96:e2:94:85:4c:
b6:bb:f2:ce:88:78:db:fc:9a:6e:f6:5a:b9:9b:75:
14:32:d0:a3:aa:32:ed:03:d3:0d:a7:55:c2:be:2b:
22:37:6e:eb:56:fc:c5:d8:6d:c8:62:fe:91:de:28:
ee:6f:ed:ea:6f:eb:78:ec:30:c0:14:20:21:e1:a6:
88:f3:99:dd:92:55:3e:3e:1d:42:31:9f:cc:47:72:
79:ad:48:49:71:66:e3:8e:1b:ab:e2:84:72:fc:cf:
65:f3:59:bc:a2:4e:64:52:b3:67:a1:67:0f:22:3c:
11:9f:b5:cb:67:97:19:64:c1:31:e1:c0:12:0e:6e:
01:5d:3e:e7:31:1b:98:cb:ac:b8:11:ab:f2:2b:85:
ff:74:3c:ef:7b:1d:7d:2c:db:9d:41:0f:b6:c9:ab:
1a:55:05:58:49:83:79:29:03:aa:ae:5d:c3:3a:ad:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:95:E6:FC:9F:51:EB:02:A9:06:6E:AB:AD:33:57:6E:53:96:C4
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0f:3e:af:08:64:1c:bc:e1:4b:39:43:cd:28:c6:99:d6:61:
27:ae:a8:a6:5a:23:fd:8f:35:52:c9:62:a0:75:57:0f:69:89:
a3:ae:ad:c5:9e:5e:76:db:e8:f9:d3:41:93:98:be:0d:ae:ce:
a9:2d:01:d6:c5:a1:76:81:3d:83:44:73:17:e9:8b:53:91:c4:
38:82:50:7b:74:7c:ac:25:7e:7e:d4:3a:7c:3a:08:6b:06:b0:
30:b2:cf:27:4e:e7:d5:c3:da:e0:26:db:1f:b4:f5:08:b5:3c:
7f:64:79:51:ab:72:3e:60:89:49:35:b7:8c:08:e7:47:31:97:
d9:0d:20:fe:0f:fb:c3:d1:05:50:50:32:79:84:02:b6:d4:ac:
fc:a9:1b:c7:b6:87:95:1a:35:60:10:92:74:63:9c:c2:54:6d:
79:db:dd:34:81:55:cd:15:9f:60:8c:16:5f:0c:ab:60:dc:db:
a0:88:e3:f7:90:33:c4:65:8d:20:97:36:34:39:45:0c:4b:75:
b9:ce:0a:20:51:b8:49:e0:c5:13:e5:64:18:f3:d2:15:71:73:
41:82:98:0f:1e:e5:17:6e:b1:02:d7:e0:e8:27:2d:5e:2c:ff:
ea:f1:76:07:84:e3:2e:46:24:a0:fd:04:88:1b:9c:bb:4f:99:
eb:2a:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:09 2025 by rpki-client