Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: fTHde0Krb6voFUmpO2fNdYx/rgGHO3PDO01/Vf5idBA=
Subject key identifier: AC:0F:87:C9:B3:20:0A:99:89:2A:74:0B:20:69:ED:1D:09:5E:50:AA
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 01976929DE364392FDD2DEC6478310681E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 099B
Signing time: Fri 13 Jun 2025 12:00:40 +0000
Manifest this update: Fri 13 Jun 2025 12:00:40 +0000
Manifest next update: Sat 14 Jun 2025 12:00:40 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: Bx+Uf9mYzMpPLkvjts8a5E9gziOfR4cda+OG0Exi3gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:de:36:43:92:fd:d2:de:c6:47:83:10:68:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Jun 13 12:00:40 2025 GMT
Not After : Jun 14 12:00:40 2025 GMT
Subject: CN=ac0f87c9b3200a99892a740b2069ed1d095e50aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:4f:9d:bb:20:03:9d:cd:15:d4:c3:73:5c:
59:d7:bb:d2:32:05:28:a5:b4:aa:52:74:81:1b:12:
d5:22:54:e0:87:4d:84:3d:28:29:9a:93:7d:47:15:
b6:5e:59:f3:30:12:3e:90:ef:2e:0a:c0:40:7f:81:
e9:d9:f5:8d:16:94:c1:a6:62:ec:44:9c:79:a2:a7:
7d:eb:c8:ce:69:ab:c0:4e:15:63:9b:42:18:d9:0c:
05:20:54:8b:d0:de:9e:61:e7:a1:c8:80:7d:c4:d8:
ac:3c:89:52:9d:d7:d3:9e:c5:7f:f2:12:81:23:70:
8a:c9:33:2f:0b:65:a7:c6:27:f8:13:93:18:f5:7c:
09:0c:db:e7:93:82:37:3b:0d:a4:54:02:fa:47:3a:
d9:49:e7:fe:4c:64:e1:39:70:18:d1:48:59:b0:08:
84:e9:47:c0:1d:e7:02:1a:f5:5c:f4:d6:f4:5c:9e:
c1:e7:bd:90:00:25:28:d2:b6:a5:6c:db:72:64:ac:
05:4f:93:e7:2e:51:5e:f7:55:04:69:1f:df:b0:0e:
c9:18:de:ea:ab:d8:90:3e:fc:50:23:9c:d2:c6:6c:
98:58:24:ab:58:74:52:10:f5:9c:fe:f3:ea:2b:79:
6b:f8:78:e1:41:97:27:2e:8f:77:24:b1:58:0a:1e:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:87:C9:B3:20:0A:99:89:2A:74:0B:20:69:ED:1D:09:5E:50:AA
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c1:ed:a6:3c:9c:21:c2:6b:a7:79:fe:df:02:61:97:c0:33:
13:da:36:93:59:1f:92:50:79:95:ff:3e:fe:23:74:b7:a1:3e:
ce:59:9e:c7:0b:be:55:76:8d:f5:19:fc:90:5a:de:48:31:51:
3a:d7:30:9e:8d:cb:32:0c:8e:44:a9:57:74:96:34:63:63:ce:
9d:bc:73:2d:db:93:09:73:66:33:bc:90:59:ce:c1:6b:06:c1:
68:c7:97:ca:91:86:bd:af:b4:11:6c:6b:a6:30:56:da:a3:ed:
ba:15:1d:37:e7:a2:66:d3:ba:71:4a:5e:dc:2b:f7:6a:c2:cf:
51:90:44:b8:d2:76:8c:e5:fe:9e:22:34:aa:0a:b1:35:f7:e5:
16:41:89:63:b3:e9:5e:2d:84:57:dc:de:e1:0d:1b:4a:e0:bc:
7b:fd:61:41:e5:cb:97:a2:e0:13:d8:8b:2b:59:70:fa:eb:54:
03:23:bf:ed:fa:b5:ba:15:f7:54:7b:3d:d4:58:43:2b:83:86:
f5:9c:08:a1:28:d3:17:54:40:87:c0:8b:6c:9c:6f:c2:1c:21:
0c:58:c4:32:b9:dd:9d:0c:1f:76:c5:5a:6a:ba:ed:9b:26:34:
3d:76:c3:35:91:20:2d:09:6f:69:7c:35:8f:80:52:61:4b:c7:
e9:ae:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:19 2025 by rpki-client