Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: Xk9NorZhYWKuvgFjIxr+j1utWED+GiCZOgaWEPcULRw=
Subject key identifier: 83:F3:AE:B3:6B:9E:2B:7B:A7:96:B4:06:6D:48:96:81:9F:A1:7F:13
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019768BC222F6260C5951C0DFE83AE1D7185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 0238
Signing time: Fri 13 Jun 2025 10:00:49 +0000
Manifest this update: Fri 13 Jun 2025 10:00:49 +0000
Manifest next update: Sat 14 Jun 2025 10:00:49 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: kRNA1jl114P9elAFLVDlPrHtm/UgZBSt/Y85k/TVrrY=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:22:2f:62:60:c5:95:1c:0d:fe:83:ae:1d:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Jun 13 10:00:49 2025 GMT
Not After : Jun 14 10:00:49 2025 GMT
Subject: CN=83f3aeb36b9e2b7ba796b4066d4896819fa17f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:1d:e3:eb:aa:82:2f:de:89:92:2b:8f:2a:
4b:0f:07:70:3e:13:15:e3:17:35:37:76:db:20:9a:
6a:de:9e:0d:b2:ef:69:84:f7:57:7d:13:ee:0c:bb:
b4:eb:1a:64:4d:60:e1:2b:46:71:00:cf:9d:02:6a:
40:0b:d8:b2:35:d2:68:ad:57:32:63:59:bb:44:30:
36:b8:e0:59:78:28:6e:83:6a:6e:f5:62:6e:73:05:
d3:33:c9:bf:ea:a6:2d:dc:e3:e6:64:05:4c:8a:ca:
6a:e8:ca:1e:ec:4a:e9:87:d5:b1:65:66:95:ad:05:
e7:a2:9c:5b:7b:ad:8b:e0:e5:d7:36:e3:c4:74:00:
d0:f5:96:2f:15:dc:5a:37:cc:9c:5f:67:45:04:0a:
4f:eb:ee:bf:d5:e1:05:23:77:f0:1d:ac:93:cd:6e:
32:ff:2e:ff:99:a1:1d:e6:5a:b1:32:fb:81:92:68:
e4:f4:95:10:55:7c:ca:86:04:f2:5a:d4:6a:b5:13:
cc:a4:85:fa:0a:eb:5c:6a:73:ca:1b:6f:15:84:1c:
7f:77:7a:62:90:4e:98:ac:77:56:f9:db:21:1e:f7:
bb:55:b8:86:6d:89:cf:25:c6:94:06:eb:35:a6:8a:
af:40:fa:41:5a:25:56:4d:18:0b:c5:87:69:69:6b:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:AE:B3:6B:9E:2B:7B:A7:96:B4:06:6D:48:96:81:9F:A1:7F:13
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:2e:5e:ba:ed:5f:9b:cf:24:7f:8b:14:43:f3:19:a8:c9:
12:6a:d8:bb:05:33:c2:16:83:63:ce:98:08:ab:82:af:d7:ba:
7b:31:4c:d1:95:26:5a:05:27:93:01:16:c2:96:72:24:bf:26:
b3:7e:51:c0:83:c2:a2:e7:58:2d:03:f0:52:9b:aa:e2:6e:62:
40:66:d1:8b:2c:b1:90:ca:7b:8f:ac:4d:f9:87:12:49:0a:51:
c9:9e:5e:07:fa:8f:40:f0:f2:2c:7b:30:85:a6:9e:d0:47:2f:
d5:3d:9f:8a:4a:05:84:70:51:e6:97:1e:ba:65:03:c0:d1:5e:
8e:bb:4c:6a:e5:b3:27:c0:f9:7e:72:c0:9c:73:6a:41:09:19:
aa:e5:4f:4b:19:1f:af:38:7f:1a:ed:8e:86:61:e2:e5:95:cd:
e4:c1:1b:ea:7b:a1:d1:1b:0f:8a:ae:64:27:ae:89:f6:59:51:
3f:b5:7c:1e:30:b5:fd:f0:68:0e:0c:ca:5c:c2:f1:05:46:43:
c7:b5:44:c5:ca:48:0b:49:38:21:65:1b:51:1b:c9:7a:73:07:
ae:8a:81:3c:fb:af:9e:45:5e:2b:57:ae:75:d5:b5:4e:1b:c8:
d4:0c:72:17:3d:6d:94:48:67:eb:d8:21:ea:ff:bb:1d:29:2d:
b0:1a:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:17 2025 by rpki-client