Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: dkoklCC4phSS8s8Ls0OmtExpJkfB+mSqGnbzDwqkIdg=
Subject key identifier: D6:5C:32:90:87:53:10:57:00:6D:5F:2F:4B:09:06:B2:4E:23:C1:9A
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0197496833EDCD22AC9FA45B5926AC19B7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 08:00:55 +0000
Manifest this update: Sat 07 Jun 2025 08:00:55 +0000
Manifest next update: Sun 08 Jun 2025 08:00:55 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: vaCHHOWozWAmfdr8C2cHiYL3d8c/U4TFQCdu2ZIx3WE=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:33:ed:cd:22:ac:9f:a4:5b:59:26:ac:19:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jun 7 08:00:55 2025 GMT
Not After : Jun 8 08:00:55 2025 GMT
Subject: CN=d65c329087531057006d5f2f4b0906b24e23c19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:86:e1:82:ff:94:8b:3e:d8:2f:83:7c:b2:
7e:48:d1:8a:2c:90:46:43:b7:d8:81:24:5d:84:67:
8b:72:7b:9a:ec:92:54:f0:06:7a:de:71:50:9e:35:
6d:64:c1:71:82:41:a4:61:1d:c0:a3:37:d1:87:21:
d4:ea:e1:5d:fe:84:29:14:bc:c7:1e:8a:03:b8:41:
56:ea:c3:28:a2:69:0d:ad:71:61:15:7b:1a:21:39:
8c:01:f2:67:e9:89:4d:9c:ca:09:78:90:0a:2a:d3:
2e:eb:9d:d5:79:2a:98:30:c1:a5:ba:a4:1e:b8:2e:
ed:2a:95:d6:a4:72:8d:55:92:c5:1c:74:4a:e2:21:
b7:0f:74:0c:79:d5:b5:9c:a8:22:b0:66:a4:d4:c9:
15:80:cf:60:33:bf:c4:8d:4f:e9:ea:1d:9c:ce:70:
ce:55:b9:e8:97:d6:cf:ea:7c:be:8e:24:8b:91:d2:
a7:47:db:fd:0a:82:ec:cd:ee:46:42:4a:8d:fc:1e:
d5:0a:63:a6:76:e7:5e:fa:db:b4:4c:d6:6c:83:3b:
6e:70:f3:52:1d:c7:7e:21:8b:4e:5d:49:91:a8:12:
45:22:98:41:06:41:da:88:bd:e8:af:87:3d:2f:94:
8d:73:58:eb:2f:1d:09:0e:8e:37:a9:43:d2:70:f9:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5C:32:90:87:53:10:57:00:6D:5F:2F:4B:09:06:B2:4E:23:C1:9A
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:c1:3c:eb:74:f2:8d:a9:b3:68:ec:c7:11:38:97:8f:99:
07:48:d6:95:08:31:47:62:6d:80:4b:40:5c:eb:2d:2d:1f:0f:
6c:dd:3b:93:65:c2:e1:d0:6c:c6:0f:82:b3:06:50:a5:91:07:
75:d8:c3:83:dc:54:d6:5d:f9:ee:c9:62:5e:00:66:f1:14:f6:
6c:58:dd:3c:60:7e:7c:58:8e:70:3a:e8:21:22:98:b2:fe:0d:
d7:c4:24:3a:54:ea:0f:5e:8d:91:3a:99:f7:d7:6b:48:27:1b:
0c:eb:e5:09:44:6e:ef:6f:09:f3:54:c6:c1:d4:50:23:3f:d5:
d6:3a:be:50:17:4c:13:5c:dc:73:c2:13:04:bf:4d:cc:a6:69:
f7:ec:34:bb:52:7d:d3:f1:c4:9f:54:a7:02:20:43:03:72:eb:
4c:31:8e:3a:32:ee:97:6d:fe:4b:59:cd:d0:af:4b:33:24:8e:
ed:dd:6a:6a:a7:66:fb:ac:74:06:56:63:64:3f:8f:2e:5f:12:
b1:5d:cb:07:0d:1e:1e:a7:23:18:25:61:25:e4:d1:ee:cc:63:
dc:9d:af:97:bb:f5:77:ad:e9:78:6f:e8:7d:fb:3e:02:14:19:
fc:a7:98:23:33:a6:87:34:83:0d:7e:e7:3b:80:d9:c6:25:33:
0b:de:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:55:57 2025 by rpki-client