Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: f925nqxnhzFjyPqudCh8aZGl/1AnSOjt4PJEAao8L64=
Subject key identifier: 59:D2:F0:F1:47:68:3C:35:28:C2:61:4A:BC:B0:5D:7F:CB:0F:A7:57
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 01974B56B9F6B33157F4F4F42FD98CE4B80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0194
Signing time: Sat 07 Jun 2025 17:01:04 +0000
Manifest this update: Sat 07 Jun 2025 17:01:04 +0000
Manifest next update: Sun 08 Jun 2025 17:01:04 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: 3Tazn0dfnGUghaXSORXXWDY43TpcfUAAUHiN3SHVbcg=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:b9:f6:b3:31:57:f4:f4:f4:2f:d9:8c:e4:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jun 7 17:01:04 2025 GMT
Not After : Jun 8 17:01:04 2025 GMT
Subject: CN=59d2f0f147683c3528c2614abcb05d7fcb0fa757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:28:90:69:2c:ab:f6:cf:4a:80:b5:e1:8f:
34:c7:6c:90:5c:41:26:f4:f4:fb:8d:5c:5f:78:6f:
f9:cf:f9:fe:b2:25:e5:95:19:0f:d8:13:ad:d3:39:
4e:1d:29:9c:0b:2d:94:87:a3:82:1c:ee:39:53:10:
1e:fe:3b:b9:32:f9:01:93:f3:82:23:43:5c:96:20:
fe:83:c7:ec:41:a4:ee:bd:8a:6d:54:77:e0:1c:7a:
5d:fe:f5:37:f4:43:9b:1d:6b:8e:90:a4:fa:c4:58:
ff:42:6d:16:d5:68:fb:79:3c:1a:f5:cd:41:37:13:
7a:db:f9:c7:2e:8c:58:15:62:25:03:0a:eb:1e:1f:
37:ee:0d:73:64:46:8d:d2:56:47:21:9d:da:86:d9:
1e:b1:ab:9c:98:5f:43:40:5c:42:40:a7:19:eb:24:
a7:3e:81:75:06:d4:0f:f3:92:ac:77:c8:7a:f5:b6:
4d:b4:6d:6e:b1:71:f7:47:22:85:e1:97:02:41:e3:
18:9c:be:71:d2:2a:d7:aa:b4:35:d9:02:9d:45:06:
53:83:6c:2d:6c:20:6e:3f:7c:a3:0f:a0:10:90:b4:
ba:91:a9:6e:86:ff:48:53:2d:8c:bc:79:44:f5:b4:
77:26:c9:b2:dc:66:6a:ac:ce:cd:ea:d5:f8:8a:11:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:F0:F1:47:68:3C:35:28:C2:61:4A:BC:B0:5D:7F:CB:0F:A7:57
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:63:f2:a4:9d:72:57:d6:7f:72:41:35:41:ed:5a:48:04:
95:5d:72:b4:73:e7:b7:e4:55:ce:52:d9:1f:f2:21:91:20:54:
f0:f4:3d:d6:d7:54:b9:53:cf:a5:f4:d8:75:b7:49:cf:e0:c0:
95:61:0e:29:67:6b:1b:d5:46:9d:11:35:58:66:fc:9f:a9:58:
51:46:83:92:3c:f9:2a:01:7d:4c:63:2b:3e:21:5d:64:9e:6c:
af:c5:77:8e:fe:9b:38:58:8a:d7:a3:7f:c6:f7:8c:78:dc:3a:
e8:d8:f2:9b:68:3f:7e:10:1d:11:ff:13:83:f6:bf:ee:17:09:
0b:9f:1a:5a:e4:6a:cb:79:bb:46:8e:4f:14:d4:51:c4:cb:4e:
c8:56:c1:98:11:21:a5:fc:97:80:7c:c5:ad:ac:0d:66:37:9a:
b5:7d:4a:e8:23:3e:47:1d:52:c4:51:82:e2:23:9a:20:eb:40:
df:44:7d:e0:18:2a:72:ac:b0:1c:f8:39:b1:06:8a:78:93:af:
c4:84:d6:b2:5a:6d:3a:01:13:71:57:13:e0:76:e2:28:11:4c:
19:09:0c:b1:d6:d7:93:d6:91:a8:ce:0a:86:40:13:8e:03:a5:
1b:40:98:00:2e:68:a3:3e:37:ae:b7:92:25:a8:64:8d:b9:a1:
bc:7f:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:35 2025 by rpki-client