Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: FEhmUrXrv+NZG4JygbdrWuUf9ODF2J8OnF7EnzT4dSg=
Subject key identifier: 13:61:A8:B3:85:EC:1B:CD:D2:C7:9C:F1:00:84:88:8D:D3:C9:01:C9
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 01975C80B719354E8E573A934F461B9FBE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 01FC
Signing time: Wed 11 Jun 2025 01:00:28 +0000
Manifest this update: Wed 11 Jun 2025 01:00:28 +0000
Manifest next update: Thu 12 Jun 2025 01:00:28 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: NP29yA9lkbglnt+pfmmVUR+uQzwDpoLfLGfdfAkHQAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:80:b7:19:35:4e:8e:57:3a:93:4f:46:1b:9f:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jun 11 01:00:28 2025 GMT
Not After : Jun 12 01:00:28 2025 GMT
Subject: CN=1361a8b385ec1bcdd2c79cf10084888dd3c901c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:b2:83:14:46:44:ee:44:52:50:3d:25:aa:
36:68:35:b2:3f:5e:b6:20:2b:be:fd:27:93:00:cb:
f0:4e:7b:dd:d5:82:df:cc:11:46:e2:92:d3:16:3c:
c9:af:5d:09:76:47:50:1a:e5:96:86:04:8f:f2:0f:
38:a9:bb:d7:58:e6:49:15:01:e9:b2:3a:df:d1:e1:
fd:2a:7d:8f:db:47:61:b2:83:e9:fa:3b:ef:9d:89:
18:0a:ae:91:36:58:b7:be:aa:5e:56:d1:cf:84:bc:
b0:ca:c0:20:e8:e2:ba:c5:aa:5d:df:7c:f1:bf:e0:
19:6f:5a:42:52:c9:71:24:2a:e4:45:b9:49:d8:19:
08:20:24:36:68:0b:d7:cd:03:22:23:16:0c:e2:a5:
94:29:6e:18:9c:19:d4:43:f5:fd:06:e6:9f:1a:5c:
df:dc:0e:23:9a:76:9b:a2:fa:7a:ae:e6:cc:c5:0e:
90:e8:0e:5c:9e:8e:4f:e7:44:20:d7:a7:cc:fd:f7:
29:e2:8a:3a:a3:17:85:19:9e:e8:6f:d4:78:25:27:
cb:e7:c1:ec:81:53:9c:ed:92:a6:64:a5:ce:ba:8a:
4f:d3:4a:36:03:88:6d:81:fb:07:f3:39:7a:cc:67:
ab:31:90:b4:d4:e0:ee:d7:5e:d3:bf:4c:23:60:86:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:A8:B3:85:EC:1B:CD:D2:C7:9C:F1:00:84:88:8D:D3:C9:01:C9
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:08:93:63:d5:17:4e:56:ac:0b:8c:17:6c:ac:f6:ae:fb:4a:
aa:ef:f3:df:9f:70:07:74:2a:91:ac:ae:64:16:d6:c5:4f:af:
7b:31:8a:ca:e2:6b:d8:cc:c6:e3:b1:1c:01:14:3b:74:e1:c0:
0c:dc:0e:83:ae:8d:f0:5d:d0:a3:18:81:2a:9d:95:8c:da:7a:
89:89:ea:76:fa:92:1a:ab:32:2f:e7:e9:f1:d2:4a:c1:98:11:
79:45:7d:43:07:24:00:9e:80:b3:3e:0f:13:e6:bd:e5:98:a7:
79:e9:da:f8:02:92:ef:55:ec:bd:32:72:bf:9f:79:4a:b4:9d:
64:c5:34:91:1f:9e:c5:19:f9:91:5e:7d:65:23:db:86:df:b4:
8d:e3:94:fa:38:a4:51:32:45:95:a2:6e:be:70:4e:71:6b:67:
81:e9:37:31:14:56:f5:49:79:39:5b:0a:6f:32:fe:2c:cf:dd:
3f:85:0d:dc:fb:ce:23:b7:e1:21:eb:89:41:f5:ec:33:4d:3e:
0f:bb:80:3c:38:cd:2f:c1:12:eb:d8:57:8e:a2:b3:67:03:3b:
27:2b:23:29:34:64:16:0b:05:a6:1f:5d:30:0e:9d:23:39:d2:
e8:f9:eb:05:85:09:cd:70:05:0d:19:6b:e5:3a:b5:48:fb:55:
f2:92:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:43:49 2025 by rpki-client