
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: zzmjfaJQlgHOt/Zfq05r+x7GADB/mJg/VU7VNrImz3c=
Subject key identifier: BA:D2:30:49:EA:1D:D9:C9:0E:F7:43:16:7A:F9:E3:5A:50:6E:37:2D
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 019759490C3DD34E29DE4A2F31F2C9B9E997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 0864
Signing time: Tue 10 Jun 2025 10:00:48 +0000
Manifest this update: Tue 10 Jun 2025 10:00:48 +0000
Manifest next update: Wed 11 Jun 2025 10:00:48 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: zswGDhqIf64kTjBFs9VbEDrSGgIFgs3kI/Y8Cd/hebg=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:0c:3d:d3:4e:29:de:4a:2f:31:f2:c9:b9:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Jun 10 10:00:48 2025 GMT
Not After : Jun 11 10:00:48 2025 GMT
Subject: CN=bad23049ea1dd9c90ef743167af9e35a506e372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:03:ee:3f:2c:04:7c:d2:d0:d4:ed:37:69:
bc:ec:3c:78:1b:91:04:32:45:87:3d:fd:5b:30:95:
03:ad:8d:e7:b9:9f:7f:e0:be:7a:47:81:28:99:f2:
c5:ad:1d:69:b4:74:01:59:45:c8:23:a0:c2:61:a3:
9e:e8:93:23:52:0d:77:8b:35:52:62:e6:18:55:25:
81:74:e4:23:70:2d:5f:3b:cc:d5:46:42:f3:34:ba:
c4:fa:41:25:85:f2:59:65:e3:31:77:5f:ea:7f:67:
0c:f8:7b:5d:fa:3f:75:c6:0d:6a:34:d8:59:66:9d:
1c:82:cb:58:e5:31:8b:d7:a2:10:f9:86:f9:83:79:
40:2c:bb:af:11:1c:6e:11:fe:b7:06:38:c0:c9:fb:
b7:17:4e:ef:fe:06:0a:c3:00:00:40:f4:db:2a:a5:
c6:d6:35:7a:52:4c:cc:e6:64:e3:e9:ab:0f:d3:07:
20:01:09:b2:37:19:1e:02:f7:3b:44:9a:66:83:84:
eb:c5:39:31:8d:a6:06:c4:9a:ec:03:d4:37:cb:86:
bd:86:28:19:d6:a2:41:b4:58:38:da:1c:27:40:1d:
bb:fb:3d:cf:5d:32:6a:16:ba:e4:ea:32:14:1b:61:
34:e1:50:98:28:68:63:2f:03:03:8f:29:be:6b:b0:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:30:49:EA:1D:D9:C9:0E:F7:43:16:7A:F9:E3:5A:50:6E:37:2D
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:23:ef:6d:7c:7f:b3:93:2b:db:b1:a1:eb:b8:40:be:89:26:
69:aa:cf:bb:21:39:ab:cc:45:a2:44:90:4e:03:27:9e:ab:bc:
56:f2:36:ad:3b:c6:29:9d:03:c1:ec:aa:c1:86:79:d0:fc:d7:
a4:93:04:c0:0a:71:bb:39:00:56:09:5b:c5:29:bf:4e:7b:79:
5d:1c:c6:2f:db:cd:25:6a:d3:fe:92:c3:dd:df:a4:a9:1e:14:
c9:4a:c4:64:2f:92:80:10:a4:99:33:8e:25:ac:75:03:b5:57:
46:37:76:0b:62:21:51:17:a6:53:aa:84:4b:87:11:07:e8:83:
65:f8:5a:76:d4:c7:29:28:18:e3:19:37:ef:a5:c7:ee:26:bb:
88:c2:a1:bf:ef:e7:14:c7:be:47:d7:7d:6a:26:9e:aa:1d:7d:
ae:ea:94:c4:d5:90:a1:19:06:43:f8:14:75:49:e1:03:dd:06:
6a:4a:2a:de:ca:98:51:21:9b:2f:2e:2e:bc:78:b8:b5:de:4b:
b5:25:f3:7f:a8:39:87:1e:44:b2:62:48:ae:0f:72:2d:8b:f9:
5c:6f:27:98:7e:35:b2:e1:0f:1c:be:e0:52:d2:95:ff:aa:07:
2c:00:5f:24:4d:30:0d:9e:14:a6:cf:fc:a0:5c:05:d6:bc:9d:
66:9d:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:20:37 2025 by rpki-client