Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: qICF7OOilkU8sV3r29E5qPTbFakDmneBfs+dk/AuDww=
Subject key identifier: BA:A2:FF:2F:6A:43:5E:06:57:02:06:25:64:04:48:4C:E7:5D:FA:4B
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019754FE5A10D2EE7E9309A925E7EA8176CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0BBB
Signing time: Mon 09 Jun 2025 14:00:44 +0000
Manifest this update: Mon 09 Jun 2025 14:00:44 +0000
Manifest next update: Tue 10 Jun 2025 14:00:44 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: Vpq99aIXYNb/r39adUBgfB6N7PTsafiRnUi3ZwqaKes=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:5a:10:d2:ee:7e:93:09:a9:25:e7:ea:81:76:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jun 9 14:00:44 2025 GMT
Not After : Jun 10 14:00:44 2025 GMT
Subject: CN=baa2ff2f6a435e06570206256404484ce75dfa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:79:b7:94:7e:7e:b1:2f:f5:32:e8:69:5b:
d7:4b:9b:5d:d1:b0:fd:81:1e:2f:7a:ac:0b:50:ed:
7a:ed:1e:44:ca:28:53:e3:8c:c7:02:78:22:95:07:
bb:f3:c7:5c:0f:ed:ce:35:c7:52:49:a9:8d:b2:f0:
03:00:03:d9:fc:eb:03:a1:4b:8d:ac:b3:83:b8:d8:
41:2c:34:a3:7e:79:2d:c0:90:39:45:69:9c:c6:99:
54:e5:b6:2f:b3:89:9a:20:c1:b9:c9:f3:80:aa:c8:
73:39:90:a1:b8:05:f5:18:41:76:bd:98:1d:4e:c1:
88:d7:85:6c:82:2a:12:c1:e0:ac:99:5e:a7:f7:3d:
02:da:f3:fc:e8:bb:9e:b1:27:9a:1d:a9:99:7b:06:
83:65:b8:a9:ff:41:c6:a5:af:69:40:1f:b6:a0:6d:
c3:12:ac:64:e1:9b:eb:ba:ad:fe:35:f5:20:08:1d:
79:4f:1c:03:a8:a1:4c:e5:a1:16:e3:a3:8b:d9:fd:
8b:46:59:28:2a:fc:17:80:26:b9:9f:0b:45:b9:b2:
28:72:5a:7e:e1:0d:dd:7a:24:fd:20:33:4e:93:d1:
44:1b:a6:d6:75:b5:f1:89:06:22:a9:34:f1:71:b5:
3b:0b:72:a4:69:d9:d3:80:1b:5e:13:ef:72:2c:f4:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:FF:2F:6A:43:5E:06:57:02:06:25:64:04:48:4C:E7:5D:FA:4B
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5e:a0:9f:ac:3f:6d:5a:39:96:17:e9:b0:63:3b:f5:91:42:
59:9a:f3:12:36:83:39:50:74:4f:d8:e4:93:ed:dd:d1:7d:d8:
bf:84:5b:ed:f7:ad:c2:0b:90:ef:5f:95:2d:9c:99:89:f7:f5:
80:0e:30:50:44:5d:54:37:4d:e9:08:aa:c9:09:f2:48:f5:25:
7a:c6:b9:ff:d2:cf:4a:fa:84:b9:7c:f9:92:cc:77:7b:30:05:
c2:f1:43:33:60:d7:77:bb:b9:f1:dd:35:1a:78:49:9d:d2:e8:
23:1f:52:2d:2d:44:75:0f:2a:2b:d5:d6:41:de:16:6c:db:a3:
8f:4e:68:6f:2f:4d:54:33:6e:76:a3:21:7a:3c:23:44:c1:9c:
96:f5:2c:1e:ed:2a:ea:8d:1c:9b:e7:8f:4d:aa:48:1d:72:bb:
fa:d0:29:b1:59:2c:1c:35:90:ae:d1:75:7e:8d:82:17:8a:4f:
4a:74:dc:49:82:8b:a6:9d:b6:bb:48:b8:1a:d4:6d:d3:d2:a3:
72:17:af:ce:13:6d:20:a5:10:1a:2f:29:60:a0:a0:7d:3d:23:
32:fa:69:de:7e:d3:17:f7:33:53:f8:7e:1b:1c:d1:91:a9:73:
25:89:fe:10:19:76:82:9f:1c:3b:ba:70:c4:ad:cd:cd:2e:8b:
66:af:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:10:46 2025 by rpki-client