Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: 1PEagadfesebm1yU/FQaqnmZjN2JNCshSpBm89jOWW0=
Subject key identifier: 8F:09:B5:97:91:DF:9A:22:47:5C:34:CE:44:3D:B7:46:37:22:8F:E7
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019749315393D67B9FFC160F7CA846CB7922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 1430
Signing time: Sat 07 Jun 2025 07:00:58 +0000
Manifest this update: Sat 07 Jun 2025 07:00:58 +0000
Manifest next update: Sun 08 Jun 2025 07:00:58 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: speIuUhbmiN7KwYgpwLPdRGp7v7YY0Vb8pylEyrfFoY=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:53:93:d6:7b:9f:fc:16:0f:7c:a8:46:cb:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Jun 7 07:00:58 2025 GMT
Not After : Jun 8 07:00:58 2025 GMT
Subject: CN=8f09b59791df9a22475c34ce443db74637228fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:93:4e:5c:79:b3:1e:7c:52:4a:73:d8:18:
da:25:aa:a2:ec:ba:a5:cb:d1:d5:5f:3f:91:0c:2c:
e5:57:8d:92:95:d0:10:80:fc:c8:0b:e7:4f:af:44:
3c:52:4c:0a:60:0c:42:11:f7:07:78:77:08:c8:53:
e8:91:83:a6:e5:e8:9d:3d:5c:d5:bb:af:cd:f5:61:
a7:e0:1e:6e:91:1e:71:32:bc:19:aa:cf:4a:7d:3f:
e7:b3:ed:14:75:45:ed:71:0a:23:a2:3a:93:f1:b5:
79:f1:80:22:b5:5b:4c:4f:3b:77:b6:57:22:cb:c5:
7b:4c:62:da:04:22:c3:d7:96:9e:9d:1d:c1:0c:f1:
42:cd:08:90:0e:7a:03:d0:90:03:42:dd:a4:15:97:
8a:58:5d:87:80:f5:cc:fc:90:54:ff:bf:75:a4:46:
46:76:a0:32:87:99:60:be:86:4b:f5:88:34:19:57:
88:85:e8:08:99:46:1b:fc:df:4e:ca:e0:95:0f:01:
3b:75:c6:50:79:0d:ef:c4:02:3b:f1:f2:56:e2:6d:
a5:35:94:62:dc:8d:34:c2:e5:d0:f1:84:96:33:ac:
3a:10:e4:7d:a6:62:41:b9:2d:f9:b0:2d:6d:f6:98:
bb:d1:ab:ab:fa:7c:6e:2c:f0:96:6f:7a:0c:a7:7e:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:B5:97:91:DF:9A:22:47:5C:34:CE:44:3D:B7:46:37:22:8F:E7
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:36:ab:7d:b5:68:ce:d5:6b:87:9e:b8:24:5b:17:91:b3:18:
b4:fc:aa:44:40:be:6f:68:ab:e2:97:b7:75:7f:84:57:9e:82:
f8:4d:c8:f1:32:58:46:e5:0a:49:9a:ce:b3:d5:56:39:9c:73:
46:d0:39:09:fa:31:26:39:15:9e:ba:55:12:a8:8f:1f:91:7c:
b6:6d:d4:29:68:08:7c:e8:aa:ca:de:3c:8b:0d:76:22:9e:2a:
7f:49:8d:e4:07:9d:d0:c4:5c:e0:b3:08:e2:92:ea:63:6a:14:
e4:16:56:7b:51:28:0e:85:da:54:7b:30:54:9a:9e:6b:6e:7b:
e8:e4:84:ff:2c:bd:cc:6f:27:b7:08:a0:60:9a:8c:5d:b5:c9:
59:16:c8:5d:c0:5b:f7:fa:91:8d:e5:4d:25:53:cd:07:1e:70:
e4:b8:b5:4d:d6:12:ef:9b:ae:4e:20:8e:a4:c6:9a:ec:ce:04:
eb:65:7b:9e:46:44:80:53:75:bb:96:63:13:22:cb:ca:d0:c3:
e7:3d:e6:55:c8:5e:9c:12:55:1a:40:fa:5e:2f:f0:5b:a6:3a:
db:30:b6:6d:2d:a9:2d:00:28:b0:18:3c:2e:f4:07:dc:bb:fb:
3a:60:01:d4:24:ba:e3:ef:9b:9c:15:30:f8:bc:6a:d8:da:ac:
6e:34:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:55 2025 by rpki-client