Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: 7503JQ6ULACFkH4Fxqy8mQPhRD4uFRl8q5e21B3lMHQ=
Subject key identifier: F6:E7:B9:60:31:3F:6C:78:46:55:53:DB:99:59:5B:CE:62:F4:DC:19
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 0197470C1125E5E9C945DBB70AA390ECA38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:01:02 +0000
Manifest this update: Fri 06 Jun 2025 21:01:02 +0000
Manifest next update: Sat 07 Jun 2025 21:01:02 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: o8KCmkGGMY2fGmylHJez4+KA/3osacRLFGlckALAJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:11:25:e5:e9:c9:45:db:b7:0a:a3:90:ec:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jun 6 21:01:02 2025 GMT
Not After : Jun 7 21:01:02 2025 GMT
Subject: CN=f6e7b960313f6c78465553db99595bce62f4dc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:48:76:5a:be:bd:18:8c:c1:76:87:48:bf:
e5:9d:38:2a:94:10:1e:d4:a6:df:1f:c3:bb:43:8a:
b8:46:17:25:bb:a3:f7:1c:8d:6a:71:f1:fa:73:5e:
a0:47:e4:3a:43:3a:5b:1d:0b:9f:d9:e4:d8:cc:f2:
d4:6c:f6:2f:a5:d8:e9:5f:39:43:0d:37:9b:e8:1d:
da:d1:69:dd:a8:50:2d:31:d0:5b:b1:92:24:6e:bd:
12:0c:95:3a:de:e3:dd:35:ff:9d:87:c5:52:ab:3f:
33:70:e1:c6:a3:4f:dd:82:e0:ff:72:df:c7:62:a3:
0a:44:c2:48:f9:c8:00:eb:a9:11:46:0f:2b:c5:7f:
b3:e6:62:1b:7d:c1:48:37:16:1d:bd:0d:07:45:0a:
b5:93:ce:a0:49:8d:33:ac:ef:b0:f5:08:7d:10:85:
9c:d5:e0:b0:a3:12:af:0e:3e:ef:2b:95:e2:1e:1d:
f7:cc:3c:77:0a:59:d0:bd:4f:83:c8:cd:d5:1b:53:
1c:37:70:52:72:b9:24:4f:35:cc:d9:e5:5c:80:80:
c9:97:5f:a7:29:35:63:1f:34:ad:3d:b1:ff:69:b3:
b1:18:7f:90:48:45:52:f9:28:81:7a:4c:7d:75:b0:
e7:9e:e7:da:ef:55:a6:5c:5c:84:e9:5a:75:35:e4:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:B9:60:31:3F:6C:78:46:55:53:DB:99:59:5B:CE:62:F4:DC:19
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0f:58:a9:fb:b6:20:13:23:0e:fc:d0:10:57:00:4c:d8:10:
3a:c0:de:b6:1b:02:43:e1:5f:c2:22:0c:50:dd:7b:bc:64:d1:
0c:c3:61:f2:88:f5:e6:a3:37:a1:94:0a:e4:04:38:f3:d6:f2:
d8:7e:07:7f:99:f3:c1:e6:48:e7:1b:b7:41:b5:30:1d:27:73:
75:f6:aa:0a:8c:50:6d:0f:9a:4f:8d:ce:22:80:81:99:f4:84:
9d:38:bb:6e:c3:4d:61:4c:3c:29:35:ab:3c:0f:88:ca:66:6d:
f8:df:9c:29:47:df:e7:eb:84:20:69:7f:7a:f4:00:ba:d2:8b:
b5:1c:9c:78:b8:2f:d4:e1:c8:cc:9b:91:9b:87:90:4d:85:7b:
a3:21:86:23:79:c0:24:58:95:d8:82:66:88:8a:c4:10:a4:e4:
6f:70:f5:db:1b:00:85:6b:e2:3d:3b:65:5b:fb:51:c9:7c:55:
29:78:6a:4f:9c:a3:f4:89:3e:07:9d:9e:c1:2a:8e:91:be:29:
a9:1c:c5:88:ce:be:c6:4c:a2:6d:90:f7:d5:a7:94:a6:10:9d:
2f:06:57:78:1e:60:30:08:88:b6:58:42:30:1e:45:c2:3a:a8:
bb:1d:49:c6:31:4f:39:ce:58:0a:3c:40:d6:5e:06:fd:7a:a7:
27:d1:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:16:50 2025 by rpki-client