Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: 3vJCKMnN0ZJx3Eu1ANyykbwjAJZvRKLZGB104YMeBWs=
Subject key identifier: 02:74:DD:46:F4:3D:A1:2C:CF:E7:C5:78:FA:CE:58:2B:68:D3:61:6D
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 01974DE9BAD0DB68BF178A97391D9530BFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 153F
Signing time: Sun 08 Jun 2025 05:00:52 +0000
Manifest this update: Sun 08 Jun 2025 05:00:52 +0000
Manifest next update: Mon 09 Jun 2025 05:00:52 +0000
Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: 4CArkOYv9BgPwl90zG05eZpihxwJCa0ZwOsKXjlcswU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:ba:d0:db:68:bf:17:8a:97:39:1d:95:30:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Jun 8 05:00:52 2025 GMT
Not After : Jun 9 05:00:52 2025 GMT
Subject: CN=0274dd46f43da12ccfe7c578face582b68d3616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:f4:c4:5c:ec:ac:4c:bd:09:9e:61:4b:8a:
b8:65:6f:b6:63:35:0a:d0:4b:e1:19:a9:f3:42:88:
cd:bb:e9:16:bf:eb:ff:3e:98:5c:ac:6b:e1:82:32:
ac:2a:94:4e:16:33:b1:81:1c:9c:6e:f3:5f:97:ab:
b8:30:88:b4:47:80:f8:85:61:00:57:e1:09:0e:be:
24:ec:bf:37:6c:24:ea:22:34:7b:a3:2b:ec:99:9a:
f2:c1:a5:d2:db:f5:28:4c:99:0a:f2:a5:3b:a7:bb:
b9:41:35:56:73:ce:7a:de:2d:de:9d:88:97:e2:2d:
36:34:97:3f:08:b2:be:10:bb:fe:10:67:2e:1d:a9:
dd:05:31:84:13:be:75:9e:8d:ab:05:2c:f1:b3:7d:
48:9c:9b:ad:61:fb:03:95:ec:4a:ad:31:06:25:a9:
18:d7:c9:f5:c7:4c:87:63:ca:8d:34:2f:8f:60:51:
9a:0c:20:38:5b:67:86:c9:d6:f6:4b:2e:3f:2a:43:
fc:34:76:f9:db:63:6a:67:90:02:7f:e7:99:c3:01:
cd:00:27:6f:60:38:a8:70:e6:97:db:f0:51:6c:cb:
73:4c:71:72:8a:89:c4:46:ba:3c:0a:ae:44:42:b5:
48:bf:d3:a8:30:fe:b9:e2:51:45:42:c9:22:97:40:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:74:DD:46:F4:3D:A1:2C:CF:E7:C5:78:FA:CE:58:2B:68:D3:61:6D
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:37:7c:77:37:49:fb:d2:59:57:0d:7c:97:80:d1:4d:05:
80:54:b6:94:7d:09:0d:2a:bc:52:c6:59:03:9f:6d:b4:fe:71:
01:85:2f:1a:0d:68:99:68:e6:34:14:a8:be:dd:a9:17:0f:e9:
31:6c:b0:ef:ed:ab:30:f2:84:25:fb:80:16:14:5f:84:76:ed:
cc:9b:ff:a7:df:43:c8:59:cd:8f:9a:6e:1c:64:c0:88:09:05:
93:86:7d:74:bd:a0:b6:ff:20:8c:c5:aa:77:cb:a8:2f:d8:d3:
10:ed:da:ea:b9:b8:67:45:8c:35:f5:7d:75:e5:6d:3a:d2:92:
39:69:0f:73:ad:a8:63:f8:d3:93:3c:55:8f:2e:0a:6f:b6:45:
41:fd:a5:1f:3f:90:1b:fc:ba:dd:c3:0c:ef:31:7e:7d:45:c0:
5b:cd:5a:e5:7a:a8:cf:c3:f3:26:d9:b7:7c:53:69:67:b9:c4:
bc:2b:2f:84:9b:01:d9:ee:83:8d:21:a1:de:a2:6b:ff:fb:a6:
e2:13:3e:a5:b4:de:60:fd:04:f9:60:d7:80:5e:55:5b:69:ef:
04:73:bc:ea:5b:8a:6f:5d:e2:74:8c:a5:3d:36:b3:b4:e1:c2:
e4:96:51:5e:3d:c8:51:6f:16:2e:e8:cf:b1:d4:41:9e:ff:e7:
29:10:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:23:30 2025 by rpki-client