Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: FYG9L5MMgSOeDz5Pc9Gk8ZSxrXoaQyOtv9bg/qp9goQ=
Subject key identifier: A5:AD:4C:87:C1:01:93:0B:51:61:1E:27:B3:5B:B9:0D:BD:35:AC:D3
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 01976E509646986640E2C6B6474F9C147ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 0278
Signing time: Sat 14 Jun 2025 12:01:04 +0000
Manifest this update: Sat 14 Jun 2025 12:01:04 +0000
Manifest next update: Sun 15 Jun 2025 12:01:04 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: jRcseeV7wDIJC8JF1sHOXavD3Nr0Xh26NI2xt5LoB6c=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:96:46:98:66:40:e2:c6:b6:47:4f:9c:14:7a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Jun 14 12:01:04 2025 GMT
Not After : Jun 15 12:01:04 2025 GMT
Subject: CN=a5ad4c87c101930b51611e27b35bb90dbd35acd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:85:53:3d:dc:18:28:c2:71:d7:ef:cf:b9:
ac:59:b6:be:6a:7f:8a:77:68:0b:2d:d4:3d:75:f1:
77:a3:5b:e3:c9:bb:9b:b3:6b:1b:41:fd:bc:3d:b5:
6d:a4:d3:e3:15:cd:26:73:19:0d:ca:eb:80:ba:0d:
f6:ea:02:a8:94:be:23:72:ab:76:dd:74:12:ac:38:
f1:cf:b6:f1:14:f8:9a:5a:5c:27:c0:9b:8e:9b:45:
b4:4c:3d:19:25:bd:13:cf:d6:20:f3:89:c7:cc:a6:
d8:1b:5a:d8:15:d3:7b:9e:06:a9:00:1e:c9:01:07:
ad:96:34:bd:cc:c0:09:5b:11:5d:18:b4:fe:34:83:
7b:f5:de:aa:85:0c:81:de:96:de:59:aa:f0:8d:fa:
d0:7e:13:31:65:7f:37:53:b8:3b:22:44:24:55:f5:
d8:8c:b3:0e:7e:99:74:e7:d1:dd:5d:61:6d:cd:cd:
fd:f1:98:27:55:b8:ec:45:59:ab:ed:ea:6d:b9:94:
06:23:bb:ce:a6:c1:5d:ed:89:80:94:9b:2a:a6:61:
95:a1:c0:96:5c:ae:e5:19:7f:5b:87:08:14:5a:eb:
3b:e2:c1:79:f5:7b:e1:e8:56:66:c0:3c:11:d0:25:
fb:8b:02:86:91:b9:10:9b:e9:8b:e0:fd:87:eb:77:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:4C:87:C1:01:93:0B:51:61:1E:27:B3:5B:B9:0D:BD:35:AC:D3
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:26:de:92:ab:84:e1:67:28:cc:66:39:58:a9:92:23:03:28:
d4:4b:62:39:01:af:d6:98:46:1d:59:ca:85:d0:6c:89:c3:c7:
ed:61:fe:77:1a:46:58:33:c3:76:4c:a0:6a:fb:b6:dd:25:b1:
9b:ad:7a:e2:4f:d2:95:79:d4:40:b7:c0:15:8f:24:dd:f1:e3:
3b:fb:4e:dc:1e:5c:1b:dc:48:48:bc:6d:3c:57:13:16:fa:9c:
e1:bd:91:0b:5a:da:cc:9f:c3:bc:bb:62:9b:73:af:d5:51:1d:
96:92:3e:84:46:3f:59:8f:0a:66:fc:0e:1b:e5:0f:34:d0:36:
ad:0d:f2:14:a5:6e:dd:f8:f5:c0:6f:8f:9f:fd:4b:55:57:fb:
b0:d0:d5:5d:da:3c:ef:ac:23:78:24:a4:17:e3:5f:25:32:af:
be:c0:c5:f4:8d:98:0e:b7:89:34:90:82:ec:14:28:02:90:a1:
36:67:8c:f5:d2:48:25:f9:cd:a8:0b:82:cf:07:db:26:af:26:
3c:85:dd:22:5e:a7:88:6c:cd:52:55:f7:79:fd:56:b4:b9:51:
64:0d:40:ae:bc:11:01:0a:39:93:32:24:f4:62:2f:77:24:66:
0a:2a:a8:1b:bd:29:1d:34:58:51:03:e5:eb:ec:15:fb:ac:7a:
e4:41:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:35 2025 by rpki-client