Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: c0UaYWicu4EWzeZJ9gWmmu3wPyCPfiM9NkHOZM/x2Do=
Subject key identifier: 42:00:6A:28:52:FE:76:25:68:81:C3:AE:53:2F:E2:29:8E:95:99:0F
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01976C2AB5C4EB0DB610965172584D9270C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 02:00:27 +0000
Manifest this update: Sat 14 Jun 2025 02:00:27 +0000
Manifest next update: Sun 15 Jun 2025 02:00:27 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: sMm1VBDXbpYKisYz1uGBLwcSFC8pQUYHG9FhL+CSiOk=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b5:c4:eb:0d:b6:10:96:51:72:58:4d:92:70:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jun 14 02:00:27 2025 GMT
Not After : Jun 15 02:00:27 2025 GMT
Subject: CN=42006a2852fe76256881c3ae532fe2298e95990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:41:d9:ea:de:7e:87:05:6b:c4:29:df:8a:
0e:03:a2:1f:6a:3f:76:d6:b8:08:2d:b7:bc:3e:67:
06:39:5e:0a:85:5f:16:05:69:c0:82:44:0e:2f:fd:
a9:99:13:31:8c:7b:89:fa:8b:1b:08:bc:b0:8c:af:
1e:af:78:0b:5b:8c:8e:f6:c0:3d:ae:98:59:06:09:
79:ad:23:d7:4a:49:aa:2a:b9:67:7e:85:97:e1:5b:
b2:2c:79:0b:90:7c:77:ed:11:f9:e5:94:74:7f:ea:
02:ba:25:78:72:68:38:11:ff:78:1e:14:17:84:a4:
e4:d4:25:a5:eb:eb:17:8c:5e:3a:72:73:fa:56:7a:
81:f4:27:39:33:1d:0f:9b:db:a6:a1:c4:ee:2e:dd:
69:97:64:bf:7f:a3:e9:73:e6:bf:2e:27:09:d3:40:
f8:f8:9b:10:f2:a8:2d:59:9f:8e:8a:65:fd:3e:a1:
56:ec:71:25:dd:ae:c4:ac:9a:56:a4:d7:7c:14:1d:
2a:aa:0d:ae:a8:9c:4a:11:4b:de:12:a2:ab:2b:39:
f2:c4:6e:1d:9d:c6:46:e5:d1:3f:e0:b6:31:09:37:
6d:d1:2e:eb:2c:f8:50:16:bb:80:ba:32:48:2e:6e:
ac:3c:5d:28:f5:d7:20:c2:fd:db:ca:d3:b0:e7:ce:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:6A:28:52:FE:76:25:68:81:C3:AE:53:2F:E2:29:8E:95:99:0F
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9e:ee:00:60:82:8a:e0:c3:c8:36:80:ce:98:58:c1:3a:38:
c9:2b:61:4c:e7:89:71:b6:cd:13:6c:ab:e0:a9:24:b7:2a:3f:
09:b2:3b:5c:90:b3:96:12:7a:cd:4a:96:ad:53:89:73:12:cc:
c3:e3:7a:fc:f8:22:ba:2e:0e:24:fe:1c:56:b6:52:c7:20:5b:
2a:31:7c:c6:55:bc:ae:c4:27:5c:b9:50:4c:13:bb:eb:80:6b:
e7:06:9f:4f:fc:d4:43:4d:32:39:ba:56:f6:fe:9f:41:ae:74:
b9:00:3a:dd:fe:9e:7c:38:dd:4a:29:5f:f7:86:38:38:54:f3:
9c:5a:78:d0:cd:64:45:60:1a:4f:bd:c9:b9:ed:3f:79:66:5b:
dc:95:ab:1b:7f:7b:88:ce:fb:86:7c:1f:c7:7d:15:fd:f1:11:
72:02:41:f3:17:3a:db:82:a1:fe:cd:20:9c:b5:97:40:57:a5:
65:df:ce:5f:f8:4b:fa:bf:fd:16:76:bc:b8:5c:e8:97:33:8a:
fa:d8:03:eb:fd:77:ce:8d:8c:88:2a:97:10:e2:0a:83:16:d8:
e0:73:9e:c3:ee:b9:d9:f6:f3:e5:60:40:a2:31:09:cb:fb:35:
cd:1b:41:a3:f0:3f:d8:ee:66:69:8b:26:43:a2:b8:fa:27:c1:
47:fa:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:19 2025 by rpki-client