Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: eoS7+HnobSxsm6Aa0z1uyOdBReB2Z+7jgZ84pkgi0xc=
Subject key identifier: 89:87:A4:34:5B:67:FF:E0:B5:DD:7A:7B:37:E6:23:63:23:AA:18:39
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 0197684E6F85FDA52AC4AF55137809CDCCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 0DA9
Signing time: Fri 13 Jun 2025 08:01:00 +0000
Manifest this update: Fri 13 Jun 2025 08:01:00 +0000
Manifest next update: Sat 14 Jun 2025 08:01:00 +0000
Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: tSvaFgmksSNOicggCUShdWkTIqsN/j8sefvyPGzj9nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:6f:85:fd:a5:2a:c4:af:55:13:78:09:cd:cc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jun 13 08:01:00 2025 GMT
Not After : Jun 14 08:01:00 2025 GMT
Subject: CN=8987a4345b67ffe0b5dd7a7b37e6236323aa1839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:ad:0b:ee:39:0c:05:3c:8e:9d:44:2b:84:
5d:88:03:cb:e1:21:b3:3e:1c:fa:76:05:ed:0a:f3:
ac:23:cd:ba:ec:f5:1e:ac:bb:a1:a3:27:ce:d4:f0:
f0:0c:f5:bf:1f:0d:35:b6:d1:54:ad:d5:c8:35:7d:
c1:60:b6:d1:b1:b1:23:b0:7a:1e:1e:e7:15:34:c8:
4f:a2:06:7f:71:48:08:ae:c6:3d:98:53:41:22:8e:
b5:fe:21:a8:58:1b:0b:6d:03:3d:f7:8d:d0:17:fc:
f3:a8:d1:36:9a:27:96:16:a1:b7:2f:13:2a:26:44:
b5:9e:9d:3c:2b:35:42:7b:40:7e:fc:81:09:01:69:
ac:43:1e:fc:72:1f:74:8a:04:de:63:8a:c0:98:ca:
ed:11:35:1d:23:3d:d0:ba:4b:6d:f3:cb:ab:1e:37:
e6:0b:61:f9:a0:05:60:b8:90:2b:75:8e:81:1e:a1:
39:9b:d4:53:eb:6e:78:59:7e:94:6d:9b:10:73:f3:
46:10:39:de:bc:be:50:fc:06:68:e4:08:7e:13:c1:
03:50:9b:b9:e2:de:95:77:d7:a0:21:e8:51:f1:20:
2d:eb:37:1a:be:bc:23:29:e5:5d:45:1f:36:81:08:
00:03:50:9b:86:93:d0:8e:8a:8d:3b:33:8f:a9:04:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:A4:34:5B:67:FF:E0:B5:DD:7A:7B:37:E6:23:63:23:AA:18:39
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:72:89:e8:a3:75:6a:e7:4d:93:34:4e:48:d4:b1:15:f9:62:
71:44:84:49:4c:14:f2:13:18:bf:cf:9d:f1:d5:33:0b:96:ac:
09:5b:c5:95:21:86:df:79:93:f3:0a:49:76:c9:06:7f:1c:3a:
1b:49:2f:fe:d8:96:57:c7:3c:bf:d7:5d:31:f2:56:54:4c:34:
0e:96:25:d9:a8:d2:9b:ff:0a:06:64:ac:6f:d4:7e:13:24:12:
e9:fc:3d:94:e8:ef:20:b7:e2:17:c6:f7:58:db:5d:e4:cd:96:
a9:1f:63:41:99:5d:ef:69:01:bb:2d:5c:7e:0a:58:1c:bc:a5:
93:e7:8c:a7:f8:11:33:ed:70:5d:d3:46:cc:e6:0d:57:dd:d4:
a8:ff:62:05:31:da:1c:50:59:a2:65:e8:5c:47:72:3c:02:4e:
1c:3d:a6:10:fd:1c:69:52:94:11:df:fd:a5:6f:73:f9:ea:cd:
1e:ba:7e:0a:f2:37:e9:63:44:ce:f4:db:1c:7f:54:76:96:5a:
13:ad:9b:ec:03:8d:89:2e:7d:6f:1e:91:4e:9c:c4:7f:71:42:
9a:5e:0f:07:97:19:49:e5:4b:2d:e8:5a:72:82:b0:0d:7e:31:
1b:c0:4a:89:68:37:2d:65:e9:8e:6e:ad:77:17:0e:81:40:14:
6d:e8:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:57:00 2025 by rpki-client