Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File: J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier: 0OMCyehm8B17WeDk2+0qT2DycWQOPMqGtihsyeXjiw4=
Subject key identifier: 63:02:F4:97:53:78:E3:F0:5F:86:AA:C5:76:DB:CE:F1:E2:B5:34:D1
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 019746D4AB07AFCB82FBEA646ABD42A9C3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number: 020C
Signing time: Fri 06 Jun 2025 20:00:31 +0000
Manifest this update: Fri 06 Jun 2025 20:00:31 +0000
Manifest next update: Sat 07 Jun 2025 20:00:31 +0000
Files and hashes: 1: 8EWOooLiQ6us4fENFVrBmODvGtQ.roa (hash: FtJlQkbOynrL0gMJhRO31RjYSiNA8vkfsMUi3PW0gdU=)
2: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: maCCfbJtpiwvxnWp5zDUvkHbXZNzoWA6KFeVz1utWc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:ab:07:af:cb:82:fb:ea:64:6a:bd:42:a9:c3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: Jun 6 20:00:31 2025 GMT
Not After : Jun 7 20:00:31 2025 GMT
Subject: CN=6302f4975378e3f05f86aac576dbcef1e2b534d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:14:8b:81:32:ad:e5:13:40:85:a2:d0:4a:
ce:db:c3:cb:00:72:a0:85:9d:60:21:44:88:ef:3c:
01:ad:4c:f5:07:f1:bd:58:f5:c1:49:9b:0e:a4:bb:
82:0e:4b:70:cc:20:9c:ee:2e:89:52:2f:38:bf:64:
e0:61:b1:6e:41:d8:c6:2d:59:ba:e5:03:56:0a:d2:
f0:a0:70:91:b3:a3:d9:44:91:2f:d4:be:2e:68:5c:
ce:a0:df:18:0e:00:52:98:52:d1:d5:df:fa:5a:f6:
67:df:d3:9c:bf:9b:60:6a:bd:9f:c3:6b:f2:15:65:
72:4c:12:3d:cd:cc:91:76:1e:e4:30:a5:b6:74:67:
99:55:c5:9f:1e:ac:90:69:73:ab:dc:fe:83:51:fa:
0c:4c:5d:70:bf:71:05:de:3d:b0:76:e4:a8:27:56:
3c:59:44:6e:bd:1d:73:95:6d:d5:0c:f0:0b:c6:d8:
08:c1:f2:1a:f8:b8:c5:4b:f0:9a:e6:52:f5:93:6c:
42:b1:9b:99:1a:e7:44:2a:96:6f:f5:53:65:b6:27:
36:74:b3:2a:0e:6b:af:f5:c1:e4:47:c2:69:9f:31:
77:e8:0c:80:2a:41:d1:72:4c:c3:99:e2:60:1f:d5:
8b:47:b6:9f:bf:57:67:cf:af:cb:87:91:7d:be:8f:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:02:F4:97:53:78:E3:F0:5F:86:AA:C5:76:DB:CE:F1:E2:B5:34:D1
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6f:a5:18:28:f0:81:f1:c5:f0:b2:c4:0f:a4:ab:3a:e4:5e:
21:a9:1a:0f:3a:27:61:fd:76:52:98:2d:13:b6:7b:76:8e:60:
c3:22:a4:35:75:b3:01:8c:ea:e1:f4:fa:0f:55:64:2d:ec:cc:
ae:81:b8:8b:f5:c0:c3:07:2d:cd:12:12:8c:3e:29:31:b4:6e:
37:d0:0a:b2:85:07:e2:46:8f:53:9b:39:9a:74:da:e2:37:a2:
84:f1:12:1a:86:3b:c4:17:c0:16:90:05:fe:7f:a6:ba:57:a4:
2e:f8:29:df:e0:3e:bc:15:63:da:6d:26:d0:d8:75:27:91:5c:
e2:0e:f9:af:84:e6:6c:bb:45:bb:a1:d9:f4:ea:43:81:14:3c:
1c:0d:82:76:36:c6:b6:9e:df:a2:e0:52:be:41:25:95:1a:fa:
9e:2a:b7:7a:f6:ec:7a:53:70:0c:60:27:a3:c1:17:90:f6:28:
77:ce:17:0a:8b:5f:95:0f:59:1a:2c:a3:9a:6c:df:7f:0b:6e:
f5:c1:19:43:54:42:02:4a:ce:8f:ba:76:8a:c9:e8:e5:13:b1:
ee:85:d0:ec:9e:4b:f0:ab:f7:1e:3e:c3:b3:04:6b:c1:ad:3d:
a4:56:a4:5c:5b:13:a9:f8:51:05:f8:61:db:fb:d3:89:14:6e:
8c:6f:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:19 2025 by rpki-client