Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: 2fiysZ/+Ik7sOZkJwrV68lvLwkXe5bJYl7MFkJ2WYwU=
Subject key identifier: 89:CF:B7:AC:9C:1A:C4:29:79:83:73:56:1B:84:39:DA:F3:51:ED:EA
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 0197477A08324E130F7A2DF0B777064FC360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 07A3
Signing time: Fri 06 Jun 2025 23:01:09 +0000
Manifest this update: Fri 06 Jun 2025 23:01:09 +0000
Manifest next update: Sat 07 Jun 2025 23:01:09 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: 5dfuUf4FkiwirmJ/MNO8PF1tjsVnpHgkpuMi6G4Ak3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:08:32:4e:13:0f:7a:2d:f0:b7:77:06:4f:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Jun 6 23:01:09 2025 GMT
Not After : Jun 7 23:01:09 2025 GMT
Subject: CN=89cfb7ac9c1ac429798373561b8439daf351edea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:b6:60:e8:d4:de:c7:3f:d4:f6:28:d4:e5:
b8:a9:15:37:68:89:c1:2c:63:11:f4:eb:11:49:e4:
14:7e:17:02:74:13:7b:63:a6:a6:65:ce:3e:fe:11:
5a:1c:96:95:be:9a:48:48:34:78:eb:e8:ce:ad:1d:
8b:8b:54:39:23:ff:10:cd:79:31:15:4f:31:61:42:
2c:92:43:d3:7d:2d:3d:91:bf:d9:fc:14:53:be:50:
92:85:0b:f0:2d:65:05:1a:fe:8e:58:0c:8f:0b:a4:
cc:64:f7:b0:54:1f:02:3d:82:c8:17:15:12:9e:66:
bf:3f:f3:74:62:a6:68:f8:09:69:ae:44:99:ed:f4:
e8:11:89:54:2c:59:89:9d:06:cd:ae:eb:82:a9:e0:
b9:ed:67:83:2a:bd:b0:1a:fd:a5:92:3f:86:6b:f8:
5e:e9:25:12:2c:83:c1:d1:8c:74:b1:f9:15:51:1c:
24:d7:8f:ea:cf:e9:1d:b8:0b:90:7f:ce:2e:7a:3d:
10:a8:6a:05:8b:5f:6e:d2:a0:9d:2a:70:4d:1d:01:
f5:a6:9c:d5:30:30:9f:e9:b9:e4:59:12:80:31:46:
ea:e3:34:07:cb:6f:3e:57:c3:cb:76:88:3e:74:f4:
56:c7:d4:3e:67:2b:50:0c:35:e4:6d:30:fe:59:61:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:B7:AC:9C:1A:C4:29:79:83:73:56:1B:84:39:DA:F3:51:ED:EA
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a7:64:ff:a0:a3:01:b8:49:d7:dc:a4:90:cd:c9:ea:37:fa:
b6:79:23:34:f5:39:48:2c:43:fc:66:76:37:82:09:a0:c1:37:
63:44:1d:cf:02:e6:cc:c9:a3:ae:09:b7:8e:5e:40:50:be:86:
9d:7a:85:63:6c:3f:45:a0:3f:71:e7:90:83:8c:d0:af:fd:3f:
33:76:ad:20:33:da:91:94:0f:99:76:b9:81:a2:1e:5f:66:30:
13:d0:77:6e:22:35:31:42:17:e9:79:a5:48:8c:05:9f:03:26:
69:bc:85:f0:ec:bc:4d:a2:1f:9b:8f:8b:c1:c7:34:62:2c:f9:
39:0e:4a:b9:91:c8:79:1c:b5:24:e1:e5:89:41:0f:6b:f4:db:
cd:9a:cb:6f:e9:44:a1:d9:b3:9a:fc:93:78:8e:15:3f:2d:3f:
ab:15:2b:23:79:bb:6a:a7:85:82:50:18:77:44:46:96:c0:5b:
93:1e:b1:4b:1b:63:7e:06:9d:ab:04:97:24:b2:b7:d4:58:4f:
e7:4d:27:7a:d2:91:d2:94:7b:0c:8c:51:5e:38:ac:96:2a:22:
61:98:0f:93:b0:d8:ab:0e:e1:c2:ae:be:9e:de:e7:81:a4:e8:
b0:98:ef:99:35:6f:27:bf:17:9b:db:ec:51:a2:38:65:6e:a9:
8f:22:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:10 2025 by rpki-client