Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: nTo3bb1veqxL2Hpp5tPQRsumIVvjNVcaqQQ9d7gp+ig=
Subject key identifier: FB:8E:E4:DF:D7:A1:78:FD:8C:45:AB:C5:18:DD:94:8A:EA:54:D1:91
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 01975723C1CF09FA691238F662D63E5E779B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 1064
Signing time: Tue 10 Jun 2025 00:00:50 +0000
Manifest this update: Tue 10 Jun 2025 00:00:50 +0000
Manifest next update: Wed 11 Jun 2025 00:00:50 +0000
Files and hashes: 1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: tMJJ6emeV6iIq/EkaPd4FshL4qoLeS/JREq/joIQDKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:c1:cf:09:fa:69:12:38:f6:62:d6:3e:5e:77:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Jun 10 00:00:50 2025 GMT
Not After : Jun 11 00:00:50 2025 GMT
Subject: CN=fb8ee4dfd7a178fd8c45abc518dd948aea54d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:45:f0:c6:cb:fd:22:ec:de:f1:44:75:e8:
0a:d7:03:d6:17:48:0d:ce:66:f6:2e:25:46:54:bb:
b6:7c:92:c7:d4:61:6b:11:5b:c1:56:0b:12:49:62:
7c:fe:c5:66:75:16:da:f6:12:54:dc:70:a1:19:5c:
eb:5a:7a:eb:91:13:87:ac:63:9c:f9:86:71:bb:83:
f2:1b:eb:06:93:66:5c:3c:ad:05:06:62:88:0d:41:
72:4e:19:2f:1b:10:bb:22:1d:74:a1:ac:1b:bb:f1:
46:ed:ac:a9:15:88:bc:97:45:f4:f4:2f:ff:64:22:
a3:b2:59:3d:b2:cd:cf:73:20:23:6e:0b:e9:3b:df:
1a:4e:4f:3a:cb:85:ec:de:ce:53:b2:fb:15:68:87:
38:aa:88:5b:8e:2c:cb:8a:b4:07:53:f8:16:4c:95:
9b:cc:e7:97:ef:bb:92:4e:fe:4a:f7:89:ff:3e:8b:
40:21:2b:38:3d:d8:57:af:ba:a6:d5:76:cf:80:39:
16:6d:74:04:b9:21:01:a5:d2:af:ea:d5:69:a3:01:
3a:71:7a:7a:c3:d5:dd:bc:5d:ae:63:98:77:05:c3:
7b:d6:27:6f:cd:34:dd:11:94:70:db:9a:08:47:bf:
97:9b:82:fc:75:4c:cf:5b:15:59:a6:50:82:59:37:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:E4:DF:D7:A1:78:FD:8C:45:AB:C5:18:DD:94:8A:EA:54:D1:91
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:87:00:fb:d9:58:e3:a9:3e:78:67:ae:fd:67:72:50:65:6c:
1c:82:c1:84:ce:57:1e:c9:b0:37:ce:61:65:9f:9a:18:1c:79:
a3:6b:fe:84:eb:7b:b6:41:e5:01:a8:d4:ef:d8:67:c5:88:1a:
bc:76:d0:de:dd:87:24:22:e8:a5:35:49:e4:3e:8a:bc:29:c8:
5d:56:e9:b4:fe:d6:48:59:6e:0b:b3:ec:8f:a5:de:43:f4:c4:
a2:8b:3a:8b:d2:8f:12:93:8a:40:d7:b4:7f:b6:2b:2c:09:c1:
6c:28:18:4c:e7:7f:5d:c3:c1:23:ea:3c:5a:14:4f:09:97:a0:
0f:40:88:27:84:fb:18:6b:fa:00:b5:dc:98:19:3f:ba:d3:bb:
10:6e:ed:46:63:2d:c2:bc:40:06:f1:f4:32:55:75:49:7f:62:
0b:40:9b:00:f6:a8:23:e0:ba:a1:01:55:8e:20:85:88:23:ec:
7f:46:9b:e0:93:55:a5:0d:73:f4:90:a7:75:ee:b0:fc:4c:cd:
66:23:20:93:b2:78:93:41:f1:c5:bf:44:1d:84:33:cf:0f:09:
39:02:75:90:a5:1e:df:d1:03:3f:c5:8e:0e:ac:fb:ab:17:71:
30:ea:b0:51:3a:6d:48:f0:67:c4:16:c5:ee:29:9d:2e:68:0c:
95:be:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:08:13 2025 by rpki-client