Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: F5yfhedT0803UgvizIv4ztKwW3rhqhpSID8ZzUssP2c=
Subject key identifier: 2D:B4:80:6F:C5:C6:C5:89:5D:61:78:36:06:D1:3E:E7:7F:FD:E6:31
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 01974A7A9410AB6929F375D8415AF54CCF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:00:36 +0000
Manifest this update: Sat 07 Jun 2025 13:00:36 +0000
Manifest next update: Sun 08 Jun 2025 13:00:36 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: dtuFubHXq+lsOAhGtruIGMLthhNoD2xt6VbLHr2+Bco=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:94:10:ab:69:29:f3:75:d8:41:5a:f5:4c:cf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Jun 7 13:00:36 2025 GMT
Not After : Jun 8 13:00:36 2025 GMT
Subject: CN=2db4806fc5c6c5895d61783606d13ee77ffde631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:93:cd:4f:a3:d4:93:14:0e:af:26:6c:02:
34:ca:c6:50:e1:62:5a:dc:d7:08:e1:dc:19:40:8b:
cb:a8:5e:15:fc:12:13:bc:4e:9a:04:de:22:9e:34:
1c:c9:91:1f:6f:3a:0f:21:ee:bc:fc:cb:ce:28:a3:
d3:39:7a:61:b7:f2:11:af:82:63:a2:1d:f6:a5:3e:
30:4e:c7:a4:98:f4:f6:c1:58:69:60:4b:b1:c6:59:
83:b0:19:77:ec:63:aa:1a:e2:28:7e:ab:55:a1:e5:
77:f7:b3:47:36:d2:0c:19:51:d4:c7:81:99:a9:94:
ae:a9:1e:07:01:06:e0:da:30:fe:cb:cd:f7:21:0f:
bb:e2:a3:79:82:ef:12:d9:e5:e7:56:42:eb:cd:2f:
be:60:aa:af:a4:1a:b4:a8:31:8e:84:a7:9b:89:91:
14:71:aa:d4:b8:87:93:4c:22:99:fa:08:32:9d:1e:
ab:ee:21:6d:00:9c:7d:d8:16:06:19:5c:eb:21:71:
9a:ba:39:63:ec:0d:de:41:c6:6a:45:9a:07:b3:2d:
a6:4b:8b:38:da:fe:dc:b7:b8:63:74:37:da:bb:0e:
a0:e4:9f:34:48:bf:84:eb:39:5e:8f:f8:31:f9:2c:
94:06:ac:19:7a:b5:4d:d1:06:67:82:82:3b:66:50:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:80:6F:C5:C6:C5:89:5D:61:78:36:06:D1:3E:E7:7F:FD:E6:31
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0a:10:78:0d:8c:58:32:c9:48:f0:86:42:c1:77:02:f0:34:
91:9a:6b:5d:e3:47:85:ec:2c:03:65:8f:6b:13:7c:08:8c:f6:
7a:2e:9a:27:07:f1:0d:25:52:74:eb:60:e7:bd:30:42:6f:12:
79:26:b2:24:30:4e:aa:97:ba:31:56:85:1a:4a:b8:2d:06:fa:
93:2c:cb:7f:72:94:0a:ab:f2:f3:36:61:63:5b:65:f5:93:7e:
5d:08:27:85:26:00:57:e5:10:ae:8d:db:b5:81:d5:62:07:03:
66:ef:a7:17:9a:45:d6:21:26:dc:be:a3:e1:df:2d:e3:99:55:
d3:92:b2:67:0b:aa:70:18:64:63:af:55:0e:96:4a:87:19:5d:
28:28:4b:67:1d:83:4c:09:54:5c:5e:03:7f:25:62:d0:ab:57:
15:07:1f:b6:6b:f9:f0:b9:9e:7a:be:ac:7d:e2:00:6b:41:3d:
c8:b9:9c:47:55:83:fd:bc:c5:f9:eb:74:be:9f:de:c1:36:2e:
86:1c:84:ee:40:0b:2d:aa:d4:b8:3c:0b:f0:d5:c2:7b:76:b3:
0a:d9:76:ad:4f:1b:58:7c:26:24:e2:ec:71:9e:cf:10:07:29:
fe:45:5a:94:81:97:25:b5:01:73:43:ed:ab:26:17:a8:18:5b:
f2:7d:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:12:33 2025 by rpki-client