Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: jx0keEd9HMGwgctW0vMhNdFHYMvQwGlyEmRGgFaSOnM=
Subject key identifier: 6C:CD:BA:FB:AD:41:9D:6B:0E:51:3A:E7:67:34:BA:3D:0D:E7:D2:3A
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 0197722CF15C8BF5294AC822340DEF8FCFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0A6D
Signing time: Sun 15 Jun 2025 06:00:36 +0000
Manifest this update: Sun 15 Jun 2025 06:00:36 +0000
Manifest next update: Mon 16 Jun 2025 06:00:36 +0000
Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: kTMajmk6fP3RrYg7wKxc4Hl0dq6eykdMX0gVC22PNeA=)
2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:f1:5c:8b:f5:29:4a:c8:22:34:0d:ef:8f:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Jun 15 06:00:36 2025 GMT
Not After : Jun 16 06:00:36 2025 GMT
Subject: CN=6ccdbafbad419d6b0e513ae76734ba3d0de7d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:67:11:e9:07:ee:04:5c:b7:88:ab:bc:36:
c9:a3:ec:61:a0:1a:78:3d:ca:65:62:2a:d8:50:0d:
5e:24:8e:f0:7a:94:d0:03:a5:f8:ca:03:03:8b:eb:
77:40:2b:e0:7d:3d:4c:f0:61:59:42:87:6c:68:29:
61:fb:87:b6:ed:5c:3f:90:76:7c:81:de:4a:d6:64:
85:9d:e8:49:f5:2e:49:6d:e7:bf:6c:c8:b1:1c:b9:
81:e2:55:6f:fe:d2:42:27:6b:9d:f1:48:5b:a9:1b:
1c:fa:d4:32:3f:37:c6:8c:9a:f8:83:19:9a:c9:c9:
02:1f:1a:b9:ab:17:5e:05:4d:9f:dd:d6:78:e4:9d:
27:1f:4b:48:8d:26:2d:92:b6:65:82:88:40:08:92:
ee:8f:ef:cc:4a:14:44:c3:e7:da:7a:3a:71:0e:1f:
91:94:08:92:a4:a5:27:0d:ee:7d:8e:79:10:76:a6:
24:a6:a4:b3:d2:c3:29:6c:29:89:35:62:c6:ac:02:
9b:75:e7:9e:8a:24:fd:ec:94:8a:39:24:e5:f0:d8:
cc:19:8e:ed:d1:09:41:93:f0:5d:0a:cc:2f:f7:ba:
1c:b9:45:39:df:df:84:c7:3f:04:73:75:73:0c:73:
a1:77:16:dc:11:33:63:7e:de:d4:b2:6d:ad:bc:28:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CD:BA:FB:AD:41:9D:6B:0E:51:3A:E7:67:34:BA:3D:0D:E7:D2:3A
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:83:30:95:a3:df:39:27:8d:d1:b3:9f:63:01:ad:36:3d:
ac:f1:aa:b9:c1:cc:cd:9e:3c:4a:21:0a:9b:65:d6:1c:56:e2:
e9:68:b9:42:f3:c3:b7:e5:67:18:ac:93:7b:0b:30:a4:0f:09:
a5:1f:95:95:dd:89:d7:7f:f2:2e:73:2e:e6:07:90:42:9d:bb:
b6:07:cb:12:22:e9:63:8c:1e:a6:ad:bd:a2:a1:7b:72:fb:d8:
5a:c0:73:1d:32:70:9d:96:f5:45:eb:c9:0d:67:53:73:17:a6:
91:6c:a3:64:41:d3:eb:a8:0f:52:1b:29:98:02:b5:52:75:8c:
61:07:1b:e2:06:64:a3:88:99:cb:56:4b:b5:77:0b:a6:f1:87:
3f:8c:6d:52:52:12:f2:d8:0b:c8:07:78:f4:95:12:ce:a4:95:
57:a9:50:bf:8f:04:80:03:53:00:61:c5:78:73:f6:81:26:a6:
1d:7e:88:57:d1:97:07:8f:bb:66:be:6f:cd:3b:f6:76:f3:2f:
aa:73:9e:17:ea:07:6c:7a:28:8b:e9:14:24:f8:c1:a6:f6:47:
7d:1e:c4:5c:fc:68:96:f1:ad:92:e7:a2:69:d6:ee:85:2a:ab:
7b:b0:c9:61:3b:7a:2c:d1:f7:cf:5b:d7:0b:f0:25:8c:fd:48:
83:44:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:51 2025 by rpki-client