Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: Hf1BfSa/mNbvWpBgaSg1dWyWUnyURaPEIGnGXsbxJds=
Subject key identifier: D8:E2:C2:CD:BF:7E:F2:89:79:AF:CA:A9:32:32:CD:E6:3D:99:2A:86
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019745F8E7CE57A2E907A154B37E20F3FC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 12BA
Signing time: Fri 06 Jun 2025 16:00:29 +0000
Manifest this update: Fri 06 Jun 2025 16:00:29 +0000
Manifest next update: Sat 07 Jun 2025 16:00:29 +0000
Files and hashes: 1: CGfUbuDeRkllwMZF7DTrKk3yLcE.roa (hash: l5jsvO9CwwUl92v3ODW6ImGh3DZFw7mx9nyyajWFi54=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: R0u+6RE8Og0cqeji2F2rrXEG+uv8mSPs9y9dalYCsq0=)
3: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:e7:ce:57:a2:e9:07:a1:54:b3:7e:20:f3:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Jun 6 16:00:29 2025 GMT
Not After : Jun 7 16:00:29 2025 GMT
Subject: CN=d8e2c2cdbf7ef28979afcaa93232cde63d992a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:fc:55:bf:03:d0:ea:37:46:53:f8:4f:75:
97:e5:eb:60:19:14:ec:08:83:35:14:b5:74:79:f2:
81:5d:0e:93:82:1b:78:e6:bb:47:63:b2:60:e3:6d:
fb:70:e0:c0:53:1c:fd:6d:40:b5:b7:32:c5:70:64:
a2:ed:4a:2d:92:da:78:52:04:ad:6a:9c:df:1e:6e:
74:46:e6:79:f3:99:ea:44:04:52:3e:a6:f9:63:6c:
9b:76:4f:6b:3f:90:79:87:c6:f9:6a:6f:f7:2f:b8:
ae:6a:f9:b9:c7:b3:23:a1:06:90:85:e7:8d:e8:c8:
40:6a:05:42:32:f4:90:7a:24:dd:7d:49:a9:0f:53:
99:c6:9a:95:64:50:3f:89:f7:48:e4:6b:2c:81:d4:
85:32:da:5d:c2:03:dd:35:bb:46:25:74:28:fe:ef:
a0:74:ab:ba:c4:66:e4:a9:12:56:0d:2d:4b:23:49:
1a:08:46:28:55:f2:b9:4c:54:95:2f:6b:ae:8f:15:
24:f4:e4:bb:34:96:cc:df:d5:53:5c:bb:4c:66:f9:
5d:3d:e8:ea:f1:42:0e:23:d1:08:4f:c2:2b:83:58:
f0:e6:49:92:fd:d4:7c:bd:20:54:1a:cc:34:2b:f6:
9a:80:74:7f:e5:38:08:0f:44:18:23:ae:42:25:35:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:C2:CD:BF:7E:F2:89:79:AF:CA:A9:32:32:CD:E6:3D:99:2A:86
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f2:93:2b:6d:33:c2:3f:be:d5:47:d9:93:3e:d7:f2:bf:23:
0d:e1:98:f1:36:9f:ae:34:8f:4f:7c:fe:9c:94:ba:68:83:0c:
74:e1:bc:8c:30:9e:10:03:41:15:c5:d9:2a:a3:a0:6e:93:63:
a2:52:02:8b:31:6d:7e:e9:9f:9f:ba:75:4d:ff:af:50:2c:5d:
92:15:24:88:d6:13:5b:8a:e9:08:c0:66:87:16:33:99:2e:ec:
12:67:91:19:26:04:a5:60:5e:18:54:b4:c9:1b:f3:d5:bb:ee:
c7:16:b1:45:be:38:e9:44:de:8c:8d:ac:19:94:9e:9e:5b:38:
d1:e7:8d:0f:00:b4:2c:23:0f:e5:bf:dc:e3:c0:ab:f5:4d:a5:
28:85:49:29:fc:f1:fa:d6:52:d5:f8:5b:e9:28:92:0a:eb:7b:
09:46:14:9e:9d:87:67:95:1e:b1:c1:bb:73:da:c0:d5:00:a8:
12:5b:93:1f:79:53:b4:84:c6:6c:a0:82:a9:1a:09:d3:2b:55:
f9:c6:ca:11:d0:ff:4c:99:29:fa:1e:c0:f8:d9:5d:62:c4:f1:
3d:99:1b:b7:d7:91:1a:59:32:8d:e6:21:0e:ad:14:0e:a4:78:
fe:e0:ce:3e:b4:46:26:85:3e:d2:98:f9:c1:1a:32:86:37:21:
01:8f:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:09 2025 by rpki-client