Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: b4UFnCvWaCrPO9rMCXb5ZHUDAaZ7+0ZvIhB61DtBTjM=
Subject key identifier: 70:FF:33:42:7C:FD:DC:03:EB:09:56:78:0F:FF:5C:0B:F4:4F:E3:39
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 01976C2AFCE80EBD3639FAD9DDA874EEFC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 06B2
Signing time: Sat 14 Jun 2025 02:00:45 +0000
Manifest this update: Sat 14 Jun 2025 02:00:45 +0000
Manifest next update: Sun 15 Jun 2025 02:00:45 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: NTYtdExP1gfEX+U/7Q09Rs5e2TD5PKsQ07bw0cPo2bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:fc:e8:0e:bd:36:39:fa:d9:dd:a8:74:ee:fc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Jun 14 02:00:45 2025 GMT
Not After : Jun 15 02:00:45 2025 GMT
Subject: CN=70ff33427cfddc03eb0956780fff5c0bf44fe339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:41:62:7b:15:28:74:73:18:eb:77:6e:d4:
b4:03:64:a2:83:15:63:93:74:cb:72:5e:d1:8e:0e:
08:e0:a7:be:19:49:af:a0:1b:29:99:57:0e:cc:7f:
22:56:49:e5:fb:57:6f:e0:4d:30:73:3f:80:94:6d:
80:94:9c:6f:77:0e:ab:8e:12:37:5a:7a:03:8c:72:
ca:01:82:02:fa:70:74:89:4d:c3:e0:1a:75:c9:ea:
d7:06:39:5f:97:03:09:ae:84:fc:12:ff:18:a5:1b:
d2:4d:85:b1:e0:4d:83:5e:a6:86:e1:61:54:b7:ef:
d9:9c:85:81:83:cb:38:02:1a:63:db:ae:05:6a:1f:
51:bf:17:7f:0e:19:b4:eb:bb:d7:68:c3:a6:59:5e:
c5:07:11:89:ee:2f:57:67:07:fd:36:51:13:0c:34:
63:fe:2c:69:bd:41:2d:d3:ac:2c:53:53:c9:53:a0:
79:3f:d1:56:73:fb:7c:d2:9a:4b:e9:d6:07:70:16:
f3:1a:cc:da:47:6a:87:af:54:b4:79:3d:06:d6:5b:
56:d4:3d:2e:57:56:dd:a1:40:0b:77:ca:29:5c:16:
75:3f:7a:6b:47:27:a2:91:47:b6:98:7b:c3:3d:80:
6f:f4:d6:6c:7c:a7:02:3d:cb:3d:16:a5:9f:cf:75:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:33:42:7C:FD:DC:03:EB:09:56:78:0F:FF:5C:0B:F4:4F:E3:39
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:98:00:01:7a:28:96:49:1f:81:d1:d5:61:e7:66:f1:20:
61:26:bf:66:12:2b:18:63:15:bd:fb:2c:23:ab:43:03:0e:79:
ad:cd:ee:3f:ad:ff:9b:76:eb:7f:82:5c:b5:93:af:6b:33:40:
d0:9b:ac:fe:57:6c:c3:41:91:b0:0e:66:60:2b:10:d0:c0:e0:
72:7b:47:3d:47:dc:bf:30:ab:81:85:9f:1c:d8:d0:1e:34:f5:
63:5c:82:45:d8:dd:7b:f6:7c:59:d6:2a:65:3b:f9:79:ec:e7:
72:13:77:5b:75:49:1b:03:0f:b8:29:8a:d1:8e:55:d2:76:4e:
a1:20:7b:9d:28:cd:59:40:a7:8a:59:36:df:78:ca:56:cd:a6:
38:1a:7f:81:98:db:7b:96:9b:46:d6:37:46:c9:bd:73:89:de:
82:d7:1a:48:a2:34:18:33:95:62:12:a7:06:3c:9f:5c:c0:e4:
fa:98:3e:87:6c:c0:a6:3a:a1:b7:de:d8:0a:56:74:24:12:36:
aa:cd:8e:0f:02:62:c4:d8:54:fe:e6:ea:5b:fb:92:3d:1d:26:
42:ca:9c:06:b1:27:e3:b2:7c:d1:46:dc:f6:56:d5:3e:4a:19:
33:ce:f3:1d:4f:35:ca:51:d2:d3:b4:bd:08:9f:e8:99:89:23:
b8:a0:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:01 2025 by rpki-client