Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: YSC/gJtaZOs/FGGHwZ2yP7Xxuq6Vg3WUWxNTs1eeOqk=
Subject key identifier: 2C:A8:E6:3E:87:7D:82:5A:FD:DF:D4:31:C7:21:1E:71:E3:C6:0D:49
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01976C98E7426FD64A69FBBC1C9E05DD7BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 11B5
Signing time: Sat 14 Jun 2025 04:00:49 +0000
Manifest this update: Sat 14 Jun 2025 04:00:49 +0000
Manifest next update: Sun 15 Jun 2025 04:00:49 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: +sdrYP0jLjHossPHqPi0pcNU62OfnzqWN44J8WB1rM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e7:42:6f:d6:4a:69:fb:bc:1c:9e:05:dd:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jun 14 04:00:49 2025 GMT
Not After : Jun 15 04:00:49 2025 GMT
Subject: CN=2ca8e63e877d825afddfd431c7211e71e3c60d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:df:ae:70:68:9d:33:11:da:3d:76:b9:42:
5a:71:85:2d:11:ed:1e:5a:4d:65:02:4d:8c:f8:91:
ac:84:e9:dd:0a:c8:00:40:58:ba:9e:6f:9a:bd:ba:
20:36:7f:e0:71:c7:48:a8:78:5b:80:b2:69:5c:d5:
b2:90:27:5a:64:a5:8c:7d:3c:dc:d4:ff:9a:4f:a9:
b2:04:63:3f:7a:d4:20:0d:d3:10:aa:b8:d4:8d:0c:
bd:dc:53:b5:e0:ca:91:1d:d5:f7:96:75:f9:72:cf:
02:31:95:46:e3:39:42:6c:4b:a5:6a:8d:d1:49:71:
c0:08:8f:56:8b:90:85:db:50:1d:11:f2:21:44:4c:
4f:44:93:c3:4f:42:f3:df:30:46:61:a1:85:0f:32:
3f:e6:6c:b3:c8:77:7c:de:9a:a1:db:7d:d7:44:e3:
a3:1e:91:19:fc:2e:fe:1c:09:63:85:f2:29:44:5f:
5f:87:3f:f6:f8:d5:59:20:95:62:7a:62:bd:ce:2c:
62:aa:09:5a:9d:fb:5a:b5:b7:e7:fe:fb:ae:d2:5d:
72:f5:56:ed:97:dc:fc:d8:41:f6:22:51:37:07:71:
cc:99:43:9d:01:37:a4:b9:f3:72:f1:99:a8:22:ff:
c8:a7:39:2e:f2:e4:f6:5f:29:5a:d4:73:61:7b:02:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:E6:3E:87:7D:82:5A:FD:DF:D4:31:C7:21:1E:71:E3:C6:0D:49
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d8:dc:c7:c5:ec:6a:f1:fd:bf:03:a3:dd:d7:bc:42:e5:be:
8b:06:7b:5b:cf:95:15:a5:b7:c8:8d:7e:f1:f4:b4:d7:6f:28:
bb:a7:37:33:b8:ec:70:f6:9a:8e:0c:30:4a:6a:f3:7c:f8:3f:
8e:11:c8:3c:20:04:84:cd:26:c7:42:10:c8:96:b7:ba:1b:ae:
c3:95:0f:aa:d8:da:47:de:fb:67:46:a5:ba:7f:be:8a:7c:ff:
19:4f:b0:79:c5:51:b7:aa:ac:39:67:c4:ca:10:a0:f6:ee:39:
c8:f3:31:8d:e0:1f:61:7e:b4:a1:d3:b8:0a:ca:8b:ff:fd:0a:
e6:c7:56:98:2e:e4:98:c3:d2:19:c3:e6:03:e3:f4:ea:d2:61:
ad:d5:f2:d3:c2:9d:77:80:bb:18:c4:00:c2:43:54:c8:86:8a:
04:34:cc:60:eb:52:cf:7c:58:2e:a2:28:81:fa:6f:e2:24:eb:
13:a2:a3:b1:5b:4e:93:a7:fd:da:4b:97:37:f1:bb:af:99:f5:
d2:d5:39:17:f0:aa:d2:3c:0c:1b:64:4b:40:41:20:18:31:67:
64:c8:af:c1:71:f4:4d:96:50:f6:cd:84:d6:a4:23:32:eb:b1:
74:46:f0:c8:ed:a3:02:95:be:b5:25:46:ac:dc:5b:20:bb:3c:
68:37:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:46 2025 by rpki-client