Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: 3yvZ304WhHQ8Tr3vcqikV1u6kyEA55xr8V/eUIutFgs=
Subject key identifier: 1E:02:CD:18:D2:72:31:93:03:48:96:7E:F0:C2:FC:5F:03:C9:40:CA
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 0197684E7A4F601348CBB342B50720EC3CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: AC
Signing time: Fri 13 Jun 2025 08:01:02 +0000
Manifest this update: Fri 13 Jun 2025 08:01:02 +0000
Manifest next update: Sat 14 Jun 2025 08:01:02 +0000
Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: AuFzF4t91etsZ/JBh6WQmcbeZKR2WA9VjQ4XSyjB1JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:7a:4f:60:13:48:cb:b3:42:b5:07:20:ec:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Jun 13 08:01:02 2025 GMT
Not After : Jun 14 08:01:02 2025 GMT
Subject: CN=1e02cd18d27231930348967ef0c2fc5f03c940ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8d:e7:b3:d9:78:83:02:d1:8b:58:78:39:a2:
c1:5a:bb:dc:93:91:1a:a6:19:1c:5d:5f:bf:dd:1d:
ad:b1:f5:93:51:32:2f:64:fd:b4:2b:b5:c8:44:22:
35:48:08:a3:07:c3:90:18:5e:1d:23:ee:e8:d3:34:
b0:79:21:86:33:78:90:76:1e:32:a0:23:da:43:31:
92:2d:76:2d:f2:12:f5:9f:46:cf:37:14:ad:19:4f:
85:8b:f7:56:9e:28:3f:30:63:e5:9c:17:ac:38:81:
74:26:07:0b:9a:1f:69:2a:ef:42:f3:33:fb:d4:06:
b6:3f:2f:e1:a1:dd:bb:be:1d:7c:68:59:14:e1:e4:
cb:0c:85:d5:61:ad:a7:46:a1:28:a3:e3:b8:4c:36:
ed:da:7c:1b:03:5d:16:51:c7:61:5c:83:c5:98:86:
34:aa:e7:eb:74:3e:d4:ba:38:96:ae:eb:97:f5:ea:
67:4b:3a:12:97:ae:e3:e0:40:c1:b3:af:95:bf:0d:
da:69:05:d6:4f:bd:89:2d:83:2e:89:b2:ae:1e:9a:
b5:4f:db:e8:90:95:75:f2:65:b0:17:fa:16:91:8e:
6d:84:d6:46:58:9c:c9:0c:28:18:d2:a3:65:ba:a8:
b2:dd:74:7c:d5:23:3c:a3:bc:ca:4d:e1:8b:11:e7:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:CD:18:D2:72:31:93:03:48:96:7E:F0:C2:FC:5F:03:C9:40:CA
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:9a:12:36:b8:0c:2a:df:0c:4b:e4:86:68:8a:f1:8a:d3:
40:e8:fd:62:94:65:d4:4c:10:96:28:11:ff:05:9f:4d:94:b1:
c8:0b:d4:f7:3b:56:54:2d:3b:3e:27:e7:3d:0c:ba:a4:b2:63:
93:f5:ee:85:ef:9e:82:83:a2:b9:4b:e7:da:4d:a6:d0:7b:92:
60:f8:9a:65:b0:50:9d:4b:cb:7e:95:95:3c:53:49:7c:cd:00:
63:ee:d2:89:98:0d:4f:e1:cf:1f:88:7e:e0:56:a7:05:92:37:
d0:65:25:02:b7:ee:98:74:5c:3d:ed:68:70:5a:78:dd:84:cc:
9d:7b:cc:39:28:f0:73:ea:ab:4d:30:91:ce:85:b1:c9:0b:6d:
54:29:a3:d0:1e:76:bd:ef:ea:4e:17:4e:45:de:04:41:54:b1:
a7:5c:12:f2:7e:86:9c:6f:2d:9b:56:7f:6d:f2:d5:09:84:c4:
c7:08:73:14:d8:c2:fa:89:32:3e:42:2b:49:77:a2:68:fd:a0:
6c:4e:a0:45:79:8c:21:d4:b2:b2:68:45:25:72:da:7a:da:0a:
85:bf:9d:89:32:11:2b:80:76:51:ee:15:86:1e:90:01:ea:cf:
a7:fa:6c:17:9c:9a:0c:2c:c9:47:40:03:26:2e:83:43:81:33:
10:d0:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:04 2025 by rpki-client