Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: pMsw6jZQ7n985VX1B4iXlP7LQ2Xt52MpPJ8U5eOR9C8=
Subject key identifier: EA:A4:01:90:EB:4F:CF:AB:1A:4E:30:2C:44:2A:52:30:0C:DF:B4:5C
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019776E67A7018D79E0EDE19C73E62E15888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 0850
Signing time: Mon 16 Jun 2025 04:01:45 +0000
Manifest this update: Mon 16 Jun 2025 04:01:45 +0000
Manifest next update: Tue 17 Jun 2025 04:01:45 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: LeXg5/L7sk72NxsLCx1Hj0O0Jg1UuCUC5m8QiRum2gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:7a:70:18:d7:9e:0e:de:19:c7:3e:62:e1:58:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Jun 16 04:01:45 2025 GMT
Not After : Jun 17 04:01:45 2025 GMT
Subject: CN=eaa40190eb4fcfab1a4e302c442a52300cdfb45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:ce:15:29:0d:eb:17:ba:bf:54:58:7a:fc:
82:99:69:be:81:75:35:db:fe:f4:53:84:df:64:43:
d8:c5:dd:37:48:07:21:9b:bd:3f:ca:c3:1c:a3:79:
6b:4c:4f:b2:6e:69:a5:3e:1d:47:bb:ab:90:96:8b:
ad:78:bf:5a:be:51:63:21:90:50:7a:ea:58:ff:8e:
71:2c:90:ab:94:78:0a:c2:aa:9f:19:cb:9a:b1:ff:
e8:1a:80:e2:00:bc:81:0a:ff:a4:29:46:a3:62:c0:
fa:75:34:8b:6d:d3:04:63:fa:2c:3a:4d:49:86:c6:
ff:24:39:cb:4a:3e:67:21:f8:a1:7d:bd:e6:d3:64:
ac:ad:2d:1a:b7:e3:a2:8b:77:0d:e5:cf:46:73:20:
8c:1a:bf:47:ae:65:ef:79:62:1f:85:09:e2:7e:91:
b2:5b:c6:49:25:89:09:83:78:c2:c4:fb:85:2e:49:
91:60:df:05:c1:7e:33:d3:e3:de:ad:c9:58:93:14:
ee:d2:ba:79:53:b0:8b:e1:2f:58:8c:25:15:df:36:
32:8d:5a:9f:17:31:ee:55:a6:7a:e3:43:d2:9d:90:
68:ab:ea:e7:b9:54:27:18:dd:00:b7:fb:4e:b9:d0:
cf:75:2b:51:60:6a:d4:31:86:d2:d2:59:f7:c3:11:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A4:01:90:EB:4F:CF:AB:1A:4E:30:2C:44:2A:52:30:0C:DF:B4:5C
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:22:60:14:a6:4f:7e:19:45:eb:2d:9c:07:58:3d:86:ec:
43:a4:82:24:38:96:7e:09:89:7d:ee:9d:b3:04:b7:53:c0:1d:
b9:b8:7f:6b:67:dc:18:4e:ad:9e:3a:13:de:15:e8:a9:c7:0c:
3a:a8:9c:95:98:c8:fb:62:de:dc:db:18:9a:f9:7a:4b:63:68:
fd:17:c8:7e:3a:b8:3e:be:bd:52:ab:66:2b:db:ef:4c:bc:74:
f3:b5:13:da:cf:3d:9b:86:d0:57:67:02:a2:01:3a:f2:48:5d:
50:d8:49:8e:b1:7f:75:74:3c:f5:d6:16:5e:b1:08:8b:94:6b:
c1:76:8c:cb:88:fb:94:74:b0:71:d4:f0:eb:fb:29:f2:d8:78:
4a:a5:04:84:58:27:96:ac:73:58:ac:63:db:2e:eb:22:e2:f6:
76:f2:c8:ba:57:90:6a:e8:5e:71:52:36:09:f7:d7:28:b4:89:
38:91:2b:60:19:70:54:8f:27:c6:c4:53:01:6b:6c:b0:fd:68:
e3:19:ff:c9:52:a7:1f:e6:c0:6f:90:0f:26:12:15:d0:2b:2a:
04:2d:65:50:77:73:41:55:78:26:44:e7:f4:de:a2:70:52:36:
93:7f:53:31:e8:5d:a5:de:8e:86:01:57:f0:4c:53:3b:42:60:
2c:45:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:28:46 2025 by rpki-client