Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: rpgWRKaPGB5IlsEiVFEepFlU8HY1z24P9ty/naBDgzs=
Subject key identifier: 58:9F:BA:1C:C1:28:F7:07:71:52:E7:94:D0:61:B0:18:67:5A:F8:91
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 019758A3ED83868F64EF81FE908370BC0A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 01FA
Signing time: Tue 10 Jun 2025 07:00:27 +0000
Manifest this update: Tue 10 Jun 2025 07:00:27 +0000
Manifest next update: Wed 11 Jun 2025 07:00:27 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: LznsnMO+1HPSweDd5K+tKBkbGXfsnAdDd6TcMdTV7Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a3:ed:83:86:8f:64:ef:81:fe:90:83:70:bc:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jun 10 07:00:27 2025 GMT
Not After : Jun 11 07:00:27 2025 GMT
Subject: CN=589fba1cc128f7077152e794d061b018675af891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:c3:28:47:c4:8d:fe:13:9f:00:2d:e9:38:
8f:bd:ce:03:e9:ba:05:25:e3:22:b2:30:9f:95:5e:
8f:1b:eb:5d:e0:12:ca:6c:49:96:a8:d3:db:92:de:
1e:55:9c:a6:44:4e:86:ce:db:fa:6a:38:33:c2:30:
cf:b4:77:23:40:98:4f:89:5b:5f:12:0c:84:da:d3:
fc:8b:68:1d:21:cf:e2:3e:43:19:cd:40:68:4b:75:
83:be:80:85:24:c8:3d:e7:63:68:70:fe:d6:b7:40:
2b:59:18:04:8f:d4:53:c0:5d:79:d1:6f:82:24:17:
26:ad:41:c2:c9:1d:2f:da:07:9f:f5:a7:a7:e6:36:
c2:e3:93:45:1d:6c:7e:3e:f6:7e:3d:66:e2:bb:6b:
82:9e:9b:a8:5c:5a:5d:8f:72:18:d5:e2:f5:4d:90:
b8:da:a5:87:07:88:2a:7e:d4:e5:0e:14:00:b3:01:
2c:31:ea:d0:3b:a0:fa:1b:7d:9f:86:27:d5:cb:40:
fd:25:d4:3b:2a:c9:c0:c6:8d:48:86:83:2f:15:75:
7a:d1:55:eb:59:f3:66:5d:0d:9d:f7:19:ed:7e:ae:
b8:0a:2a:74:78:f9:b8:77:c3:d0:60:2d:47:d6:78:
5f:8a:c7:de:cd:e3:37:01:14:02:2c:36:b3:e7:18:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:BA:1C:C1:28:F7:07:71:52:E7:94:D0:61:B0:18:67:5A:F8:91
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:69:f4:09:f4:96:64:8a:f9:26:4c:50:56:c8:32:ae:73:
5d:53:f7:eb:9e:bb:dc:f3:2b:9d:4c:29:e7:3c:d5:83:1b:d9:
a3:32:77:46:1c:4f:e7:46:e9:4b:ce:0d:64:bf:ab:c2:3e:77:
77:fa:c7:6a:02:73:4d:97:6f:df:c8:cf:9f:79:54:61:74:31:
92:e9:47:7c:04:df:87:72:4f:80:10:9f:58:ce:42:2c:bf:3a:
d5:ce:6f:34:d6:d2:67:f8:f8:69:a4:47:d2:f8:97:b0:7c:de:
71:37:2f:9e:65:19:b8:d4:9e:d9:a0:13:3f:51:cf:fc:7e:32:
b2:34:ec:41:33:19:60:35:17:18:47:96:14:03:34:23:cb:a8:
b3:5c:3a:f2:fa:15:61:26:c1:00:e8:e5:fb:b0:13:08:f3:9a:
b7:78:90:b0:2c:5d:98:9e:5d:0f:65:cf:ab:25:be:62:61:9c:
44:1d:7d:78:64:eb:87:ea:e3:d3:62:7e:eb:c9:38:5e:01:7d:
67:0c:0e:ee:0d:24:1d:df:a7:36:28:a1:e5:76:36:02:32:28:
ef:b7:71:ad:af:85:30:1d:c7:7d:d5:a7:dc:dd:d9:05:ef:1b:
c2:47:58:41:c1:a8:bb:c3:ce:6b:ee:03:ca:24:0a:31:64:1f:
21:51:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:25:19 2025 by rpki-client