Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
File: j35CW5mA3j5tTVVraau_8SVIZ7E.mft (raw, json)
Hash identifier: KeIwN33gCuGsp9JM2FE3oJ4DBvlQJoERPK+NwUb9lbI=
Subject key identifier: 78:14:A7:04:4D:F6:4F:FD:3D:2B:3E:A5:23:83:4D:96:F4:36:CF:C5
Authority key identifier: 8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
Certificate issuer: /CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Certificate serial: 0197684E284AA3076D481BF536E9479166E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
Manifest number: AF
Signing time: Fri 13 Jun 2025 08:00:41 +0000
Manifest this update: Fri 13 Jun 2025 08:00:41 +0000
Manifest next update: Sat 14 Jun 2025 08:00:41 +0000
Files and hashes: 1: FsU8rSGyQb0kGFvbxmQ4nDDUBg4.roa (hash: xmWHpgYL9RCJue+qrtt+Eau987wbwxVuh1gIf8HMA3I=)
2: j35CW5mA3j5tTVVraau_8SVIZ7E.crl (hash: 4g/lf+Op5B7s6RBCMJrr9cgfVeLlRS0J8XvJVuKO/v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:28:4a:a3:07:6d:48:1b:f5:36:e9:47:91:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Validity
Not Before: Jun 13 08:00:41 2025 GMT
Not After : Jun 14 08:00:41 2025 GMT
Subject: CN=7814a7044df64ffd3d2b3ea523834d96f436cfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:8b:6f:db:f9:60:75:24:82:1d:24:00:23:
2e:74:22:9c:0a:91:5a:f0:de:b7:6a:57:c0:8d:85:
64:0e:b7:16:7c:d6:b6:79:95:47:f8:a0:3a:49:fb:
4e:1e:8e:cf:c7:1d:1f:77:c6:d8:2d:74:e5:2d:4b:
6d:54:97:13:b6:09:52:11:bd:78:7b:42:1d:5e:78:
e0:95:5a:18:9b:1d:73:9b:6e:66:30:24:af:9c:6c:
64:20:3f:34:db:5d:ab:d7:97:a9:22:66:33:25:0e:
51:eb:0d:8f:ee:f1:57:5c:09:76:fb:82:3c:c3:24:
96:0d:fc:e8:2b:6e:8b:19:44:e9:6f:27:5b:e0:df:
79:7d:9c:b4:41:1b:ac:de:58:36:a7:3e:90:8e:db:
54:a3:9f:00:5b:e5:f4:a8:04:9d:3d:ce:e7:85:f4:
0b:cf:f3:62:7c:fe:cb:c0:8f:5b:5b:12:20:87:47:
82:c4:b2:64:a9:cc:c5:22:ba:a2:a0:41:27:8d:e1:
50:9d:8c:dc:8f:a1:0a:da:25:59:55:49:75:7c:43:
8a:86:8e:d7:ed:87:83:12:18:62:94:db:bf:9a:59:
bc:aa:ac:6b:77:dd:5e:d9:03:15:c8:24:a6:de:e2:
dd:f8:da:5c:40:5d:73:61:e3:ac:5e:7c:85:d5:12:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:A7:04:4D:F6:4F:FD:3D:2B:3E:A5:23:83:4D:96:F4:36:CF:C5
X509v3 Authority Key Identifier:
keyid:8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:0d:8a:42:cf:fa:8b:77:3d:c4:7a:95:d0:8c:ec:92:21:
61:94:a7:c6:56:2e:11:da:e8:a4:5a:8e:db:81:06:50:e1:de:
0c:2c:e5:25:6b:22:e3:c0:87:ba:33:4d:ea:b1:ed:9a:53:0e:
09:2c:0e:67:4b:98:3b:f3:55:d3:4d:bd:98:2e:32:84:99:2a:
77:64:c1:db:40:e1:c0:89:23:8d:e1:41:77:ba:34:d7:bf:5c:
6d:aa:22:61:35:56:98:26:5e:40:5e:58:63:72:e5:4b:25:b4:
c6:af:86:b7:f0:0d:95:d5:76:69:2c:06:de:5b:08:96:b8:cd:
19:da:73:c6:f2:f7:87:d1:d8:df:67:d0:29:e5:82:22:fe:d1:
7c:88:10:c8:b6:26:6b:4d:25:ce:59:0a:bc:e7:4f:2d:d3:c5:
a7:85:16:4a:d9:e4:74:18:0b:6d:6d:76:d8:12:20:0d:81:29:
55:65:a7:3f:43:74:be:52:a5:73:e6:9e:aa:06:a4:62:be:3f:
0f:2c:69:10:05:1b:90:d2:f1:d5:0b:26:2a:31:e6:03:65:4d:
ce:5c:ba:2f:87:32:98:5a:15:06:bf:aa:9b:2a:1a:a6:b4:c2:
9a:6b:98:26:68:38:3a:cd:1d:b9:fd:42:ca:86:3e:24:e3:1a:
2f:cb:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:50:06 2025 by rpki-client