Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: 56TbCmt14s5T5XgQ/fspq7BaUpIHszXFDHyxYWFunbA=
Subject key identifier: F2:AC:63:69:FB:9F:46:28:19:1E:06:8F:FC:06:43:37:74:78:B5:C0
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 01974441791C753A9DB7F1CDDB7825157C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 09F8
Signing time: Fri 06 Jun 2025 08:00:30 +0000
Manifest this update: Fri 06 Jun 2025 08:00:30 +0000
Manifest next update: Sat 07 Jun 2025 08:00:30 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: JHTgdToGP6Zm4FAsnPL4uv8o3ju4ZU82NnzypVLrIQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:41:79:1c:75:3a:9d:b7:f1:cd:db:78:25:15:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jun 6 08:00:30 2025 GMT
Not After : Jun 7 08:00:30 2025 GMT
Subject: CN=f2ac6369fb9f4628191e068ffc0643377478b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:a6:ce:ec:45:c7:ea:ec:3a:3a:aa:43:bf:
a8:f4:3f:c8:fb:39:d1:93:74:46:75:a4:cf:d1:34:
53:b5:bb:df:a6:73:2b:2c:f1:4c:34:9b:19:1b:3d:
43:e6:fb:e6:6d:00:fb:d8:3d:88:78:fe:97:c4:08:
a6:05:90:44:97:10:26:91:e7:c6:17:4d:06:d4:fe:
fe:96:22:77:d6:16:72:1d:94:20:96:6f:53:00:a1:
e8:c6:e1:4a:6c:9e:fd:14:a7:12:b6:f2:df:21:5e:
01:73:72:0a:9c:42:8c:2f:39:e0:47:6b:80:86:36:
05:e9:25:83:71:63:bb:1d:64:21:d3:f6:61:88:c6:
3a:f5:86:22:15:28:3e:79:2c:b1:ed:1c:08:2d:32:
91:fb:16:06:66:87:34:f5:16:4a:cf:c6:fd:bf:53:
e3:94:27:53:90:5d:3a:fb:f8:a3:e2:1a:bf:95:72:
8f:68:78:c3:2d:8e:8a:9e:24:4f:d8:bb:32:6f:2f:
ea:cb:43:a4:2a:95:a5:d5:4a:bf:03:65:c2:f4:85:
b1:cb:1a:73:e2:59:b6:e4:62:8d:49:d4:5f:54:84:
47:2a:e0:c9:9b:55:db:07:e6:02:f0:aa:82:4c:cb:
ef:e8:74:a8:79:11:9e:17:68:c3:ca:fa:7e:fd:a2:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AC:63:69:FB:9F:46:28:19:1E:06:8F:FC:06:43:37:74:78:B5:C0
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5d:18:ba:db:8d:f5:2b:ab:84:71:61:18:e7:92:8a:db:47:
53:d7:d2:e6:f3:36:d9:e0:6c:ff:9e:a6:bb:d6:ce:3c:40:02:
05:d4:c9:bc:d9:60:03:d6:cb:c8:ca:03:2c:74:4d:13:4c:5d:
13:e7:c5:a6:7a:b4:96:4f:56:2f:b8:70:59:d6:a1:e4:d3:a3:
25:87:9b:d3:1e:be:3f:23:2b:0c:dd:f1:e2:cc:c8:4d:f4:0d:
87:61:62:98:2f:d3:ad:5f:cf:2d:d5:db:83:fc:bc:7a:f6:10:
4a:91:cf:78:df:ec:c1:d5:73:85:72:e9:bb:a4:f7:f2:bf:ac:
ca:87:32:7d:72:6d:6b:e0:c4:8a:ff:93:d6:9c:e0:b5:27:47:
07:7c:c9:d9:aa:c6:90:f2:e1:44:48:ca:2e:b3:bc:55:c4:ed:
cc:e8:5b:e3:d6:7d:6a:b5:fc:69:69:41:13:6c:ee:ff:a1:80:
c0:42:16:48:0b:1f:30:88:14:b4:ae:2b:f8:0e:f8:43:07:17:
af:aa:81:49:0b:9b:f9:1d:6c:e3:98:75:41:31:f4:34:1f:72:
ba:30:0d:4c:94:56:8e:20:3e:c3:6e:6b:1d:8f:e5:c2:c8:2b:
ed:ef:ca:95:44:e8:f4:20:d2:2e:2a:86:6f:7e:0f:00:79:b3:
69:3a:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:48:23 2025 by rpki-client