Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier: Jl9O4vbwN+s0xUmEE0f2QaEsalpshC34cRFS59i1S8s=
Subject key identifier: 5D:F0:1B:21:29:5C:4C:30:85:88:F1:5B:17:1F:21:E5:10:01:FA:0E
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 01974E8E1241621D95E07249EAE0CD0E645B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number: 0D3D
Signing time: Sun 08 Jun 2025 08:00:22 +0000
Manifest this update: Sun 08 Jun 2025 08:00:22 +0000
Manifest next update: Mon 09 Jun 2025 08:00:22 +0000
Files and hashes: 1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: ydzxUe+T+VmXRm7Zw6O4MmkpAqQhIkXF9LNWvnpmstU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:12:41:62:1d:95:e0:72:49:ea:e0:cd:0e:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Jun 8 08:00:22 2025 GMT
Not After : Jun 9 08:00:22 2025 GMT
Subject: CN=5df01b21295c4c308588f15b171f21e51001fa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:ff:4c:26:c9:af:09:33:da:3b:67:cf:6c:
5c:5b:d1:06:0b:a0:86:e6:9c:89:5e:2b:50:44:75:
e9:40:90:b3:d9:7b:1c:04:ac:66:b6:6e:6a:6c:9b:
61:74:98:e7:9d:c4:29:49:84:9f:a9:68:93:4b:96:
8e:f1:c5:57:72:01:f3:ce:72:48:d4:46:a8:80:a0:
73:3c:2d:4d:84:94:fd:fd:fb:c7:87:f8:35:b8:a0:
ff:97:31:6c:1e:f0:74:95:53:fa:e2:ab:c7:2c:6e:
75:95:b0:ff:b7:f2:c0:ef:c5:43:5c:a6:de:40:33:
14:eb:76:cd:0a:e4:84:0c:ec:49:48:70:03:b6:5d:
a3:29:77:c6:3c:34:9a:b8:53:be:dc:6b:72:ff:6c:
65:84:07:2b:ab:31:c7:ca:16:90:fc:af:93:36:ff:
90:77:e9:2a:aa:32:59:48:50:f4:e0:79:7e:2b:b6:
95:b6:58:48:33:88:c9:83:9f:1c:70:0c:25:e9:75:
95:d3:13:f7:cc:f2:5b:7e:5a:0b:d1:c9:18:4a:e9:
83:16:ba:69:77:8b:21:ef:f0:50:6d:dc:09:e8:18:
90:a9:03:ac:91:e7:0f:e7:b8:0d:ff:e9:3a:78:e3:
2e:3e:cd:d1:94:71:6b:3d:d9:a2:3e:0f:0b:ec:fb:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F0:1B:21:29:5C:4C:30:85:88:F1:5B:17:1F:21:E5:10:01:FA:0E
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:3a:da:84:3a:78:ae:d3:0e:49:c7:4b:f1:9a:49:95:aa:
cc:ad:16:14:fb:a4:e5:eb:71:f5:f8:a0:6b:b1:c8:68:e8:b0:
87:d0:d5:46:d1:63:17:8b:48:38:ce:13:dd:b2:76:67:f7:2b:
80:6c:89:d3:40:63:fb:75:7a:69:a0:fe:84:6c:f5:7d:42:03:
28:ed:d2:41:7e:4a:0e:46:43:8c:d5:e8:a2:fb:10:2b:20:9c:
b1:d2:45:7d:2b:eb:b3:cc:0a:73:3f:46:46:a9:da:f8:9e:d2:
17:42:85:50:a5:a4:96:f0:42:d7:99:b1:c2:1d:9f:4b:37:4d:
e5:23:2e:b6:88:23:f2:5f:0e:ec:ea:e3:1e:47:a6:3a:05:fa:
5f:3d:7d:54:8e:ee:5f:06:40:03:57:cc:86:ed:98:21:f0:43:
b6:81:95:07:5c:15:0f:81:50:2f:df:3b:21:14:12:18:0a:43:
1e:14:d3:e8:56:e9:d3:9c:5f:b2:c4:48:40:0e:dd:3a:81:db:
fd:c4:44:50:27:02:a9:a1:1e:07:92:0c:d8:77:07:28:ad:d5:
45:2c:0b:1e:36:c5:bf:e7:18:12:a6:d8:c2:79:57:ed:5b:db:
2d:76:e9:27:c7:8b:f1:30:f8:d8:b4:cf:9e:7e:ef:f6:e9:c2:
d4:18:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:38:54 2025 by rpki-client