Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: oksX32MqlFP7/ltk0QbeXCf93AgWCfjWJw+t8qe5Dyo=
Subject key identifier: D5:55:C0:1D:46:85:EC:AD:E3:C8:00:A6:AC:AC:C8:61:FD:9D:9B:9B
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01976997CA4B5643E15A30C0CB2A928A7CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0A8A
Signing time: Fri 13 Jun 2025 14:00:44 +0000
Manifest this update: Fri 13 Jun 2025 14:00:44 +0000
Manifest next update: Sat 14 Jun 2025 14:00:44 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: pnh35opfGuLTKdxRxov1jNBTbScNsZ7LaKi8v2JGLO0=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:ca:4b:56:43:e1:5a:30:c0:cb:2a:92:8a:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jun 13 14:00:44 2025 GMT
Not After : Jun 14 14:00:44 2025 GMT
Subject: CN=d555c01d4685ecade3c800a6acacc861fd9d9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:40:a5:00:0d:71:77:fa:e8:3f:41:1a:25:
7c:be:1d:95:5b:f8:94:2b:e9:10:99:48:37:6a:c2:
c4:64:c5:85:86:7a:a8:67:95:2a:1a:5b:6a:11:7b:
34:2b:7c:db:a9:71:8b:a7:cf:62:40:a0:77:39:0e:
5f:15:b5:84:c0:57:a2:fc:fe:0e:3e:ba:ae:77:3f:
91:69:f2:a7:22:b5:cc:0e:4f:c3:f3:f4:c0:8a:b8:
9d:6b:0b:39:4d:97:67:93:5a:01:a9:b2:c6:7c:8a:
7c:47:1f:56:e7:21:44:74:6d:4f:a6:27:7f:19:3f:
a9:dd:9c:c4:f8:ba:2e:57:43:81:9b:36:e0:0c:03:
3f:98:81:22:37:99:49:27:7a:ae:75:e8:1d:80:96:
f3:2d:94:c0:42:1b:0e:a1:1e:37:56:eb:d7:12:8b:
5d:bb:6f:09:72:65:54:2b:31:16:15:69:8b:7d:aa:
12:13:fd:c1:ad:4d:a6:f4:54:a9:fd:28:fb:6c:79:
66:02:39:a2:35:48:09:23:ec:b9:1e:17:71:d7:e6:
9d:0f:eb:76:8d:aa:73:20:e2:a2:bb:6c:64:9e:91:
ad:d5:ea:9c:1d:d9:63:f7:63:60:43:ce:11:79:9a:
b8:ce:27:75:06:06:3e:43:7b:c0:9e:6b:aa:1b:0d:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:C0:1D:46:85:EC:AD:E3:C8:00:A6:AC:AC:C8:61:FD:9D:9B:9B
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f3:ac:03:06:06:81:67:02:e2:51:ec:26:08:e9:68:17:b6:
09:91:6c:e5:87:1c:c1:c0:b2:97:2d:a7:ad:9d:83:13:25:ae:
43:58:1a:9c:c6:fb:2f:e9:c5:85:b2:91:cd:73:60:c0:dc:5d:
ea:7b:66:2f:cb:86:9d:0f:9a:4b:c9:e1:a7:32:b4:95:fc:e4:
fc:53:45:e5:3c:a7:31:4d:77:63:65:1d:d2:e6:78:b7:ba:45:
53:3c:64:b4:48:cf:5e:a1:17:48:a3:bc:b8:be:f0:81:c3:18:
88:54:ee:0e:38:86:bf:ad:b1:a2:bd:ba:42:b4:89:3a:dd:5e:
4b:95:03:54:46:27:68:c7:1c:6a:00:dc:c7:55:37:72:b5:5e:
f6:98:5b:f4:f5:0d:d9:dd:b8:31:4b:0f:d2:ae:f8:00:3e:5f:
4f:81:52:52:98:e4:bf:a6:c8:f6:1c:57:a6:0d:bd:0a:08:27:
da:81:88:41:52:d2:e2:e4:46:48:43:3f:ef:14:d8:e8:cb:ab:
c0:b9:24:12:8c:6d:1a:43:88:5f:ea:95:0a:94:74:d6:e2:93:
65:b7:18:04:9b:ae:3c:47:0c:dd:40:a8:ba:d6:54:07:9d:eb:
ea:72:d2:ce:83:79:60:5d:14:95:13:e2:f8:8b:17:cc:4c:3b:
9a:ae:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:28 2025 by rpki-client