Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: h0XJ0U911qXJkodWQoQCAzBAGblH4lqmpbM+kMRRnlY=
Subject key identifier: 29:94:6F:17:FC:2B:0E:CE:3C:A3:C9:22:15:13:BB:47:9C:DD:C1:0E
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 01974EFC632C658C383CFEC71645E6D673E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 10:00:52 +0000
Manifest this update: Sun 08 Jun 2025 10:00:52 +0000
Manifest next update: Mon 09 Jun 2025 10:00:52 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: uu45y+XAN+80dl7IiEJaXVTzxW8biawFFQRyj267kK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:63:2c:65:8c:38:3c:fe:c7:16:45:e6:d6:73:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Jun 8 10:00:52 2025 GMT
Not After : Jun 9 10:00:52 2025 GMT
Subject: CN=29946f17fc2b0ece3ca3c9221513bb479cddc10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:d8:56:65:31:65:0a:39:cc:d2:77:87:5e:
4a:64:c3:2e:c7:b0:f4:51:54:13:04:2e:cc:e5:fa:
b5:a8:a3:fb:a8:b6:55:e0:90:b9:f5:4c:88:c5:34:
e5:e7:f6:40:b6:08:3a:74:5e:e4:6d:c4:cf:b3:91:
2c:3d:70:b9:65:4f:bc:8c:d7:7f:6b:ab:2c:72:fe:
59:7e:5f:45:53:bb:d7:c3:6e:ab:20:f6:90:d0:d5:
d7:cd:ba:5e:08:97:e7:7e:e0:08:06:8b:58:9b:fd:
00:8f:e4:bf:92:41:3e:f6:18:ea:79:56:87:1a:c8:
fb:44:05:42:69:57:4d:c6:e8:88:32:6c:74:ed:98:
18:bc:ab:6b:3b:3a:87:90:da:4c:a4:e5:88:28:96:
cc:5a:e7:34:33:c2:72:f5:23:2c:a4:97:38:e5:22:
ce:0b:64:70:99:fd:98:b8:ae:7d:2a:a7:3c:02:bd:
bf:2b:6c:51:68:d0:6a:99:5b:56:a2:e0:ee:10:4c:
af:d5:ec:71:ad:39:6f:ef:f3:6f:59:06:3d:60:ee:
84:2d:fe:f5:73:0d:d3:a1:07:77:24:32:c1:9c:2c:
6f:4f:19:eb:d9:a9:46:6a:21:c8:47:7e:b8:64:29:
a8:76:31:7f:29:73:85:43:95:f8:37:0d:46:51:22:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:6F:17:FC:2B:0E:CE:3C:A3:C9:22:15:13:BB:47:9C:DD:C1:0E
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:4c:35:d5:f5:7c:09:ac:57:0f:74:e7:55:1d:8a:c9:ad:
cf:59:5a:a2:3c:56:1c:d8:d9:4a:f8:ce:5b:0c:9d:e6:3c:a0:
af:c9:38:f6:d9:9c:45:fc:e4:00:80:c2:13:5f:a1:3c:34:d5:
92:20:1c:b0:f2:73:ce:8e:ff:85:98:c7:b7:22:dc:1a:c6:6d:
c9:f8:f5:e6:9e:34:c3:d3:65:cb:ad:10:88:57:16:4e:ab:02:
7a:87:dc:cc:5f:e8:29:92:a6:ef:e3:d9:5a:c8:80:17:a0:6e:
a9:23:d7:f8:5e:a7:5d:df:46:93:e6:e7:22:29:14:a0:a9:e9:
66:79:a1:f6:68:24:0e:ca:21:a3:9c:e1:3b:26:7a:c8:aa:b8:
28:20:c5:64:74:20:4f:4f:81:73:c7:7e:5b:85:b4:af:86:96:
69:e6:21:1f:df:64:9d:ca:b9:13:c3:b2:e1:ce:b2:d0:28:03:
9c:05:9e:ec:d4:44:13:ce:e2:44:47:b0:de:a8:cc:94:97:29:
ee:36:3d:18:5e:62:e2:a8:85:39:10:2f:cd:3a:c7:1b:23:b0:
a3:34:c2:60:4c:18:00:1e:0f:4a:f2:25:f2:eb:f7:39:cf:d3:
52:c9:39:ae:26:61:35:37:04:0e:c0:0c:af:98:53:5f:4c:67:
7f:49:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:31 2025 by rpki-client