Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: KPK4yNOXuM0eBp4s9PcRtPyGMnsaRmzhjOl3M3n+SgA=
Subject key identifier: AF:E9:3E:EE:6C:A1:ED:3F:6B:91:DB:52:06:6E:52:2A:13:8C:65:5C
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 01974DE9CD38F957B3B121454131C091DDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 085F
Signing time: Sun 08 Jun 2025 05:00:57 +0000
Manifest this update: Sun 08 Jun 2025 05:00:57 +0000
Manifest next update: Mon 09 Jun 2025 05:00:57 +0000
Files and hashes: 1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=)
2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: lwbor6rq+QaOULfyS17VF9fSjeJCUdLWv+KzpajdlYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:cd:38:f9:57:b3:b1:21:45:41:31:c0:91:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Jun 8 05:00:57 2025 GMT
Not After : Jun 9 05:00:57 2025 GMT
Subject: CN=afe93eee6ca1ed3f6b91db52066e522a138c655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:0f:8f:47:9e:e3:f6:ca:9a:65:69:f2:e5:
77:1b:22:02:c3:18:8b:19:d6:05:25:54:5a:d3:0f:
e8:b0:15:ca:bb:9a:04:01:8a:80:78:35:4f:a8:a0:
bc:60:fd:07:f6:e1:fd:b2:11:23:e3:cc:60:c3:65:
42:5a:41:89:d7:1e:23:22:c7:45:94:be:59:55:de:
59:91:59:a8:6e:0c:a5:72:c6:83:88:b4:0b:7c:b4:
b9:7f:ec:89:86:db:42:92:18:f4:11:5f:4a:02:6f:
d6:12:d5:5d:ab:d3:62:57:d2:8f:b2:9a:48:1e:8e:
93:a4:26:fb:d1:4e:af:61:c0:d3:17:d3:f0:4f:b8:
ae:4b:ed:ec:df:2a:18:4d:11:83:f1:eb:c9:ce:a3:
34:87:fe:1c:0f:56:16:28:fc:cc:fe:77:13:1a:6e:
4b:a7:67:f4:74:4c:09:77:5e:f6:b0:70:76:e3:fa:
5b:33:20:55:f2:8e:ce:0b:fb:76:27:61:3e:ae:b7:
02:0d:45:bb:d1:fc:5f:ee:0c:aa:27:41:7e:32:39:
0e:12:e7:51:8d:de:7a:64:5d:cc:99:10:1f:7b:25:
f2:65:79:ac:38:15:29:4b:77:a3:a8:c5:b3:a9:3c:
f7:f5:98:2a:a8:63:67:55:0b:8c:b5:59:38:67:0e:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:3E:EE:6C:A1:ED:3F:6B:91:DB:52:06:6E:52:2A:13:8C:65:5C
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3e:64:d8:95:6a:ac:a4:36:78:1e:7b:b9:72:82:5f:3d:7e:
df:e1:e6:9f:c2:ee:47:e7:b6:09:07:74:e7:c6:6d:0e:38:e8:
a1:87:4c:41:7f:9a:01:9a:92:2f:32:d6:3d:95:0a:33:90:5a:
5d:e1:b1:4f:a5:ec:01:5d:5a:44:3c:5e:b7:1e:96:53:14:e5:
49:81:c8:9c:58:4a:cb:47:61:f4:ad:ee:72:97:54:db:39:21:
0f:50:1b:fc:d1:7a:8f:ec:18:1f:b5:08:6b:5b:49:0a:10:2a:
61:e9:b8:59:05:95:b4:50:22:41:cf:90:2f:05:41:d3:4b:fc:
ef:62:58:23:cb:97:58:bd:78:6e:e7:59:c2:ba:56:5c:ce:3d:
2f:63:1a:7c:ec:37:62:eb:a3:57:d3:2b:31:a4:c3:79:f5:60:
c1:68:33:e8:38:73:c0:0f:3c:2f:4e:51:47:f4:bb:ad:eb:34:
93:b4:9f:36:f1:03:c5:f5:3c:03:7a:a3:33:99:51:cb:52:45:
0d:f9:1d:33:5d:10:f1:d3:88:c3:dd:e1:88:20:5a:bf:99:c1:
c3:10:35:a8:56:25:52:2c:0e:ba:24:ba:32:aa:14:85:84:55:
22:93:16:3a:0f:3b:05:67:a7:be:cc:46:5e:51:c9:91:19:e9:
65:7b:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:58 2025 by rpki-client