Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: OA3W+4p3ktDRBts9mdUYqi+ZbR0iTUNoTm2DGxeFOXk=
Subject key identifier: 9D:BF:3D:0E:8F:51:3E:43:12:C1:88:31:E9:1F:56:57:B8:C4:E3:55
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 01974E8E1A5131209E36F2BFC86A264636DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1298
Signing time: Sun 08 Jun 2025 08:00:25 +0000
Manifest this update: Sun 08 Jun 2025 08:00:25 +0000
Manifest next update: Mon 09 Jun 2025 08:00:25 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: /fAI8kiBtPHF5bBxG8cr1KLfyb4ttThGOLs4p+QGrRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:1a:51:31:20:9e:36:f2:bf:c8:6a:26:46:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Jun 8 08:00:25 2025 GMT
Not After : Jun 9 08:00:25 2025 GMT
Subject: CN=9dbf3d0e8f513e4312c18831e91f5657b8c4e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:1c:57:78:75:a3:6b:0d:06:50:62:1c:a8:
8f:d3:f2:87:6e:ae:5a:9b:19:aa:a4:0c:9e:e2:a2:
b1:ec:97:ce:75:b9:6d:b6:ee:0f:ab:7d:ad:6c:07:
bb:5c:30:5e:d0:76:85:02:0a:ad:6e:0d:a7:fe:37:
50:04:ba:45:49:58:5b:49:04:23:ec:d6:c7:63:ca:
80:ca:52:8e:6d:eb:6c:f7:d7:db:e1:12:80:9c:a3:
cd:b8:56:d4:70:bb:60:63:4f:52:e7:b2:4a:a2:b8:
59:65:1a:99:0f:81:6e:7e:09:3f:af:0f:5b:df:58:
cb:87:b6:3e:ed:d9:ea:2a:f6:7c:30:b5:ac:f4:30:
be:42:bc:f1:6d:08:02:96:cd:6c:eb:60:be:dc:51:
f9:d8:60:48:4e:10:68:fb:73:14:bc:dd:58:69:d4:
72:ff:bd:3b:e9:2e:4d:e1:39:20:20:f4:61:8a:8e:
f4:be:24:46:b7:77:ad:65:db:6c:ee:fc:97:a1:50:
0c:d0:cc:d3:26:cf:47:d3:28:fa:62:c3:6a:b9:41:
42:85:06:1d:be:d0:62:fc:7a:1c:a1:25:fd:dc:0f:
7f:d3:a4:c4:2e:a6:cb:02:9a:74:6f:3c:92:9b:0d:
4a:6a:7a:58:f2:b3:0a:b9:d2:63:fb:73:f2:19:e0:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:3D:0E:8F:51:3E:43:12:C1:88:31:E9:1F:56:57:B8:C4:E3:55
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:61:20:4a:8c:4c:ed:c6:a6:e2:f6:71:da:da:61:c5:b3:95:
41:d2:01:99:57:c1:90:3d:89:59:6a:ef:f8:9f:43:be:ca:ec:
58:72:1d:e4:42:c2:48:99:3d:be:55:9e:ce:f2:c7:fd:a9:fe:
32:5c:a8:f0:97:96:ab:36:ba:6c:74:d9:b6:ce:a4:c5:5f:45:
f0:e5:04:f9:ad:b2:26:1f:53:9b:60:5b:9d:8b:3b:2d:d7:52:
01:76:1c:5f:70:24:95:5c:12:7a:27:bb:21:9a:61:77:03:b1:
26:af:71:3d:90:c8:03:91:8d:69:55:88:99:47:0f:8f:65:3a:
7b:13:f7:27:4b:92:d0:0e:c4:99:4e:80:20:c2:38:1c:51:95:
0d:33:7d:24:d5:05:f9:fc:6c:dc:17:a1:b3:ea:74:6d:b2:21:
0e:c0:70:ce:d6:45:34:64:ba:da:c7:77:e7:33:fd:e5:93:dd:
a6:06:92:8e:5f:a0:6e:e5:a6:40:0f:87:cf:fe:fb:fd:46:c8:
c3:89:5a:c5:52:fa:60:74:88:34:98:8e:2f:9a:84:1c:9c:2e:
9f:4e:4b:1b:26:e8:2a:58:c9:19:44:a3:f4:d8:7c:c8:08:07:
09:14:f0:8e:e7:51:7b:67:36:8e:f2:e1:4c:1e:f7:8c:33:f6:
91:26:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:36:37 2025 by rpki-client