Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: /zGXJ3RwUtt6POt+QGWOnLI5i5ElwtRG2wsGcMbKi60=
Subject key identifier: C6:82:19:8E:BE:76:CD:82:CB:D8:DA:92:17:4F:1D:D2:FE:EF:D4:78
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 01974F33940689FF1E547EB6B1C3FFAC6321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 02CE
Signing time: Sun 08 Jun 2025 11:01:09 +0000
Manifest this update: Sun 08 Jun 2025 11:01:09 +0000
Manifest next update: Mon 09 Jun 2025 11:01:09 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: bsvnu0KH/izUqq244ztaYHU+6Oc/7uLdUESJ2sn8Ydg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:94:06:89:ff:1e:54:7e:b6:b1:c3:ff:ac:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Jun 8 11:01:09 2025 GMT
Not After : Jun 9 11:01:09 2025 GMT
Subject: CN=c682198ebe76cd82cbd8da92174f1dd2feefd478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:b9:f1:9d:11:43:04:23:82:21:a3:81:a7:
14:88:c1:b0:f8:a4:71:b0:9e:3f:81:8e:35:07:82:
5e:42:63:f4:a1:a5:db:d3:83:48:7e:be:b4:cf:2b:
94:35:fc:c1:2a:4f:89:5b:b0:5c:b5:03:5f:8b:1f:
bd:ab:c8:46:2e:c4:04:05:b0:af:77:9e:e6:3a:3d:
00:e4:ae:dc:08:7d:96:be:19:69:66:d1:37:c5:0e:
b9:97:45:1f:d7:0f:3e:d4:45:e0:e0:98:87:dd:00:
d2:62:3d:e9:6e:e3:fc:c6:58:0c:0a:f5:35:7d:b5:
2c:78:30:1c:58:1a:2e:04:34:9e:e3:c6:72:38:af:
7f:4d:ee:bc:32:69:2c:f1:64:e3:77:26:fa:c3:44:
4a:7f:98:54:a6:0b:33:1a:b8:b8:f9:9d:3c:c7:f3:
86:f3:34:56:8e:2e:a2:c6:f8:93:7a:25:e9:5f:a3:
58:15:b7:4f:fe:7b:45:e5:95:8e:0f:75:b0:8e:24:
90:11:d8:c0:fa:3e:67:6c:96:45:a3:47:ba:35:68:
88:27:17:37:07:30:07:bb:b9:1c:69:ef:c7:26:41:
5c:bb:1b:b0:b5:4a:37:a8:90:38:88:88:fc:92:81:
53:d0:01:3d:00:95:84:6c:bc:70:83:f3:58:de:d9:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:82:19:8E:BE:76:CD:82:CB:D8:DA:92:17:4F:1D:D2:FE:EF:D4:78
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e3:ef:a6:57:64:32:b3:0f:4d:96:e6:0e:89:f2:ed:2c:34:
c1:2e:0e:a3:48:08:2f:a3:ae:49:f4:f4:af:6a:d3:50:39:1c:
f5:0a:13:c8:86:30:cd:6c:6d:6c:89:f6:4e:d5:2e:16:f0:09:
0d:71:c9:3e:8e:d2:3b:fc:67:b4:cc:52:a5:20:ee:c3:ea:55:
fb:41:c3:35:e0:2b:82:9a:6d:7d:45:41:e8:d4:98:2f:f3:7a:
fe:62:08:16:d6:b2:e4:db:62:f8:97:cf:32:af:17:0e:68:25:
51:91:4f:ba:79:87:b2:23:ee:26:7e:f5:bb:db:28:43:2f:8c:
73:e5:ea:23:36:94:1d:f0:22:76:32:db:22:46:8d:f1:07:71:
c2:8e:c3:df:83:79:aa:8f:01:9b:38:3c:82:fb:01:e1:ba:0f:
8d:92:b6:de:f3:a6:ea:98:cc:a3:2b:64:3e:15:f3:1a:98:a8:
9e:4b:07:df:ff:95:a9:8e:ff:97:54:a4:18:0f:2a:7e:aa:5e:
9c:88:69:f3:b5:6d:2d:11:2f:1a:e0:6e:21:9c:1e:c1:dd:39:
71:37:14:98:24:bf:52:5e:52:fb:d2:a1:00:5d:5a:85:20:c1:
3e:91:f6:7b:41:a0:34:01:09:cd:cf:4c:d6:3e:86:87:c2:a1:
31:11:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:29:05 2025 by rpki-client