Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: qkosLaZqN1c2sIva3qJ3CbfNX3v3ZaWaqBBBWhnkhFM=
Subject key identifier: AE:22:1D:66:F4:45:F5:0E:FD:79:1A:CA:4D:46:23:9C:3B:41:66:8D
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 0197537E0649E8E98CA3EC07D4FF13A0F549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 0861
Signing time: Mon 09 Jun 2025 07:00:57 +0000
Manifest this update: Mon 09 Jun 2025 07:00:57 +0000
Manifest next update: Tue 10 Jun 2025 07:00:57 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: hm3vsBlF7R9K17l3fjsx+TpT9ONCXVjEyywnTGJ/JjI=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7e:06:49:e8:e9:8c:a3:ec:07:d4:ff:13:a0:f5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Jun 9 07:00:57 2025 GMT
Not After : Jun 10 07:00:57 2025 GMT
Subject: CN=ae221d66f445f50efd791aca4d46239c3b41668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:bf:f3:ca:9c:f0:50:42:d1:5c:6e:ed:4d:
2b:bb:d4:74:a6:0b:d0:45:e0:38:b3:75:21:e6:ab:
a3:f0:bb:5b:40:58:f7:42:92:8e:8a:72:d1:af:90:
47:0e:52:0d:a7:c3:35:17:05:f6:d4:03:f8:b3:fe:
b3:ab:e3:05:27:19:76:97:02:e5:8e:91:7a:33:f7:
a4:57:70:68:12:e3:a0:e4:da:21:51:90:41:db:73:
ec:76:67:77:60:9a:64:77:c2:a2:56:70:76:2f:b6:
30:53:66:06:14:5c:68:2d:54:4d:d5:0a:da:c3:87:
7b:55:df:96:d9:b7:49:41:c3:e3:a6:07:0b:44:a8:
b9:79:94:ae:af:88:a5:38:c2:19:04:6a:12:7c:cb:
84:44:c4:a9:12:1a:1e:38:2a:8f:f3:94:b7:cf:b5:
68:ff:16:68:40:f2:04:84:81:c1:94:e7:13:1c:41:
e9:3e:fe:3d:a9:a6:e2:a1:38:ee:06:0e:9b:9b:0d:
a0:b0:15:c2:fa:70:fd:6b:b1:49:eb:5b:f6:d6:ce:
e7:c8:06:a3:94:dc:6e:01:53:72:46:ed:ab:42:36:
cb:20:32:32:b0:16:d0:68:2c:aa:e3:45:45:8d:74:
87:3b:5d:e2:5d:29:dd:e0:0c:9e:10:cf:98:5a:29:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:1D:66:F4:45:F5:0E:FD:79:1A:CA:4D:46:23:9C:3B:41:66:8D
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:7b:82:bd:bc:64:dc:61:42:34:87:f4:79:e5:5b:0b:7f:
bf:e2:29:03:20:80:4e:77:cb:d9:3d:30:88:b5:f5:2c:e1:ed:
ea:6a:d1:95:ff:5f:01:7b:0b:cd:79:ff:ce:c2:3a:19:bb:4f:
01:80:81:22:02:f2:d8:80:36:cb:c2:8b:95:0f:d0:e6:2f:a4:
cb:00:1f:95:9d:8a:e2:84:58:dd:ec:7f:36:6f:52:14:8e:bc:
e4:d3:e5:ec:5f:a4:de:cc:e9:de:36:5a:cf:e1:67:22:f7:b7:
28:9c:55:25:16:80:96:63:09:5a:c1:c1:6e:35:8b:15:c2:b4:
42:63:92:35:39:ec:3b:c7:fc:6b:c6:3e:b0:62:a8:e0:b0:27:
89:43:c5:e9:99:4f:02:33:84:08:b3:06:f5:6c:67:44:7c:42:
bd:77:e7:c2:d6:a8:21:11:23:aa:f1:be:54:76:94:03:d5:82:
f0:27:cc:08:a3:5c:87:26:1e:94:22:08:39:c5:ec:1f:77:16:
7a:82:f6:55:00:92:69:80:da:37:bb:46:a3:0e:90:8a:3e:92:
2a:7d:23:52:89:4d:13:32:21:1a:51:89:c4:c0:a4:bc:e0:d3:
5a:67:0b:f4:79:18:11:a5:66:e4:dc:4a:e2:00:b2:04:2e:42:
8b:48:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:53:56 2025 by rpki-client