Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: frBjHPPZzjjA1/TEKOqb32Imr+6AL/VteOcm8b2AGkE=
Subject key identifier: 58:B8:D5:31:E2:52:E4:F3:9A:E3:0A:A4:90:0E:E6:AE:C4:B2:28:05
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 01974C31F23383C3208CDBF1284BF295946C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0E3F
Signing time: Sat 07 Jun 2025 21:00:31 +0000
Manifest this update: Sat 07 Jun 2025 21:00:31 +0000
Manifest next update: Sun 08 Jun 2025 21:00:31 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: BUJn/lv/MBDsz3mc2FLMwtjJVWCQ/KS1M0Wkfsom4W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:f2:33:83:c3:20:8c:db:f1:28:4b:f2:95:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Jun 7 21:00:31 2025 GMT
Not After : Jun 8 21:00:31 2025 GMT
Subject: CN=58b8d531e252e4f39ae30aa4900ee6aec4b22805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:09:62:cf:16:f5:ac:ec:cb:9e:46:0f:b7:
d5:0c:77:cb:73:5d:34:dd:37:60:18:de:c9:31:0a:
06:63:6a:bd:fc:52:cd:5a:22:9d:fe:1e:cd:f8:24:
05:12:a7:fd:ae:c1:ee:6c:42:c8:dc:82:6a:ed:2f:
d1:89:dd:c0:a4:5f:9d:da:e8:1e:11:1f:c1:d5:8b:
ee:c6:61:2a:88:dc:be:60:b3:53:db:b2:5a:97:f7:
f7:46:98:46:90:76:27:a5:b3:cb:c2:a5:3a:e8:83:
9b:98:bd:fd:30:bc:9e:39:81:11:c8:e5:87:79:2d:
81:62:a6:f1:a8:f6:c1:79:5b:7a:d2:9b:b3:2a:58:
f5:b5:23:8f:a4:8a:12:1d:87:55:02:83:58:5b:7d:
9d:31:26:1b:a4:0a:4f:7c:24:9f:5b:d3:6b:76:25:
03:eb:9a:07:e7:77:4e:37:f9:d0:fd:d6:01:48:ca:
c2:5a:d7:3c:42:27:64:31:8b:25:d9:19:2a:11:2b:
9b:f4:ec:73:f3:89:f6:1c:68:25:32:f4:57:95:76:
11:89:15:f1:ac:be:e2:4c:2a:85:3c:bf:c8:78:63:
d8:1a:5e:f6:c8:f7:b8:03:b9:f7:ab:82:3b:fb:a8:
f1:d4:47:99:fb:0f:76:93:ed:13:a6:56:30:a4:3f:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B8:D5:31:E2:52:E4:F3:9A:E3:0A:A4:90:0E:E6:AE:C4:B2:28:05
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:30:02:cf:db:7b:1b:3e:ac:bb:5a:e1:47:c3:5a:a8:60:
06:4a:41:d1:69:c6:1e:1d:a9:de:51:59:d3:f1:e5:6e:21:cc:
8e:e6:75:fb:79:4e:a8:6f:ba:fe:05:2e:38:d5:10:ca:8d:e7:
da:de:4d:65:e1:5f:73:49:06:20:5e:09:ad:64:b3:35:14:b5:
40:7e:20:b0:be:7e:5a:c5:b9:45:d2:46:dd:f1:51:e8:63:26:
53:0e:29:14:fc:6a:05:fb:2f:63:c7:b0:09:c2:d1:b3:7e:9b:
98:de:d1:fe:3d:37:ff:ee:0e:5d:65:b6:1a:16:3c:75:d0:d9:
31:27:9e:6e:cb:b3:13:02:e8:83:4b:9d:b4:9c:0a:46:d3:d6:
9e:a6:ab:f6:09:36:32:5a:df:1f:3e:8d:0f:ff:99:43:bc:ff:
81:1a:b8:da:aa:d3:40:d4:b5:7e:8f:c6:0f:70:47:38:90:48:
1a:4e:73:19:d2:42:ce:92:54:41:0b:9d:15:d2:c9:ab:66:f7:
05:93:bc:ca:2a:90:8c:91:a3:b9:0c:80:74:94:04:b5:b4:da:
0e:4e:16:a2:76:5d:7e:a7:45:1f:db:f9:87:54:f2:4a:fc:f8:
06:33:49:c4:95:98:e3:21:c2:43:db:11:1c:46:f3:2b:28:7c:
0d:b5:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:49 2025 by rpki-client