Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: 7tHTzSr8ITGDqBI46ms5ax2S0qbOVwWp+0PcQaLJFsU=
Subject key identifier: C9:26:59:E9:2C:0D:78:D9:9A:E7:BF:54:A6:2E:ED:0D:9A:60:95:45
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 01977B307445186390E4F95C7466E4C903E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 00:01:02 +0000
Manifest this update: Tue 17 Jun 2025 00:01:02 +0000
Manifest next update: Wed 18 Jun 2025 00:01:02 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: KdUUDZt/TS8Vg+nnpuQFYgr6Bnr39dgwRacKACr8GUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:74:45:18:63:90:e4:f9:5c:74:66:e4:c9:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jun 17 00:01:02 2025 GMT
Not After : Jun 18 00:01:02 2025 GMT
Subject: CN=c92659e92c0d78d99ae7bf54a62eed0d9a609545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:88:2a:8d:f0:56:c1:8b:8e:8e:06:fb:bf:
4d:d4:9b:00:d5:0f:91:9f:7d:81:7b:26:c4:89:f2:
6b:14:09:52:58:2b:37:c7:b9:30:4e:92:12:09:4a:
df:f5:fb:25:23:d4:04:bc:fe:2e:ee:84:fc:d3:e0:
9c:09:85:17:90:2e:3e:d3:47:d0:61:30:36:31:b6:
ca:36:39:5e:d9:00:a3:9b:91:90:4e:7f:eb:c4:96:
e3:f4:77:56:43:c7:08:2c:da:5b:a0:06:be:9d:27:
8e:cc:bd:3c:66:d6:a9:9a:35:e9:16:76:65:e4:4d:
6a:ff:7e:92:97:a0:8c:76:5a:8a:fa:d6:86:cb:f6:
56:19:6f:e0:56:79:de:76:1a:63:70:d8:d6:21:af:
95:a8:b6:bb:a1:db:de:67:ee:44:ec:0b:21:ea:4e:
c0:34:36:56:bd:3f:92:f0:bc:7f:46:c9:bd:d3:6c:
bc:5c:40:d2:70:f5:96:23:55:70:9a:01:43:a5:3c:
16:16:32:eb:c7:9f:7d:46:b3:ed:c3:49:ac:31:86:
42:ef:8d:6b:b6:6e:f2:6d:e9:2b:dc:a9:99:45:f0:
2b:29:a2:3e:b3:f0:fb:65:bf:43:84:ad:1d:1f:85:
92:ea:56:c4:d4:a8:1c:b6:07:89:18:8c:83:04:34:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:26:59:E9:2C:0D:78:D9:9A:E7:BF:54:A6:2E:ED:0D:9A:60:95:45
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:0b:c6:87:b2:a5:f2:f8:33:e6:40:87:09:08:a3:be:af:
e2:63:16:7f:05:59:80:50:b8:48:8d:4c:7c:ec:e7:4a:cf:cf:
64:2b:f5:76:a9:f8:5b:ac:d0:14:5b:42:e6:c0:06:ea:85:d8:
71:a2:d8:1d:1e:ac:f8:0e:17:1a:e9:59:e7:a2:e7:8d:59:23:
b2:6c:97:b5:1f:af:a0:6e:f1:76:68:9b:fa:89:4c:4a:33:6d:
05:58:97:4e:53:96:e8:f5:51:43:60:2f:68:ef:4a:33:ce:4e:
33:fa:38:66:c9:21:b2:fc:a4:cf:85:a1:26:06:99:d4:9d:18:
3e:69:86:52:f4:a9:08:c0:9e:ec:f6:1a:ef:65:57:c0:b5:85:
1d:ce:d7:0f:02:82:e0:73:c9:99:2b:f4:42:d3:97:dd:cd:b7:
e3:27:91:b0:0a:c1:a4:6a:79:f5:70:c0:9c:0a:9b:c6:a3:2c:
74:9d:2c:42:35:3e:45:62:13:73:47:61:d7:4e:c3:2b:5b:73:
4c:48:e7:64:ee:98:1f:69:3c:af:da:73:94:5b:10:b1:83:34:
6b:3c:d9:ab:54:25:96:8d:fb:aa:a7:3c:87:b1:fd:46:a4:0a:
db:05:7a:ce:29:30:9a:f8:f4:90:4f:75:11:33:68:6c:86:81:
50:26:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:23:01 2025 by rpki-client