Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: LkZTmvbXo54mOkAamBi4ZmZ5L5qUBaPYOSNmc2W0TDo=
Subject key identifier: E9:B9:53:EB:DF:CA:07:AA:53:65:C1:F6:DE:9C:5C:08:2C:06:4A:7C
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 019776779A908B3E78039C50A8AB5EB8CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 0700
Signing time: Mon 16 Jun 2025 02:00:39 +0000
Manifest this update: Mon 16 Jun 2025 02:00:39 +0000
Manifest next update: Tue 17 Jun 2025 02:00:39 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: dQwN/WiHI7o/r49SwaH7vS7APVD5ioBXaZRzYSnwLBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:9a:90:8b:3e:78:03:9c:50:a8:ab:5e:b8:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Jun 16 02:00:39 2025 GMT
Not After : Jun 17 02:00:39 2025 GMT
Subject: CN=e9b953ebdfca07aa5365c1f6de9c5c082c064a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:3a:6a:17:ab:34:bf:e1:0a:2e:90:5a:27:
6d:8e:bf:11:28:47:77:ce:32:63:2f:42:63:51:e9:
35:25:63:5e:7a:37:25:b7:2f:6e:c6:66:ea:05:b5:
f0:3a:db:18:9e:fb:f8:91:0c:44:69:33:63:19:c3:
b8:ed:d6:e4:2e:6b:1e:6f:ec:7b:31:9e:84:a4:64:
76:97:27:93:5f:2c:18:b2:c2:99:d2:ba:8d:d8:d7:
d3:d4:2f:ff:58:94:ad:f8:73:2a:b2:17:65:47:4f:
6b:f0:c4:d6:62:2c:68:bd:b9:a2:a5:16:0d:b6:2c:
7e:d8:90:6b:0d:c0:b5:95:d1:83:bc:a2:31:03:d5:
21:2f:03:f0:77:03:11:1d:53:d2:ff:45:77:60:48:
2b:64:03:38:0d:21:1a:8c:eb:1e:13:3d:7a:62:06:
66:cd:96:7b:99:e3:84:02:74:c0:49:b7:93:58:89:
c3:5c:02:cf:49:af:ca:13:f7:77:42:48:89:34:10:
24:e3:31:5c:a3:40:b8:bd:dd:5d:1c:0d:e1:3c:d8:
64:96:da:49:29:e3:8e:00:09:ed:14:84:62:9b:be:
89:bc:70:81:16:3b:8d:06:65:0e:8e:b9:0e:78:4b:
0b:4b:85:3c:f7:1b:8e:31:d2:90:09:8e:db:84:38:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:53:EB:DF:CA:07:AA:53:65:C1:F6:DE:9C:5C:08:2C:06:4A:7C
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:0a:a6:e7:88:46:c3:9d:92:2a:de:12:46:97:b7:4d:38:
10:b8:94:a6:a5:2e:5e:cc:a2:9c:2b:ba:c1:4f:bb:0b:0a:40:
5f:3a:63:2a:1e:07:45:12:8b:67:d4:c6:40:1c:65:fb:35:7c:
5d:b1:f8:8a:8f:c0:fb:dd:38:6f:16:2a:6f:d0:95:89:cd:a6:
ab:ae:c7:c2:a4:80:5c:f9:6e:36:5b:de:e2:cb:91:a6:33:92:
9c:12:50:16:35:c4:46:4a:fe:3b:0e:60:99:1c:d5:0c:b4:ad:
ce:5d:a6:90:ce:12:e4:4e:c5:7c:a7:09:aa:6b:9b:94:02:73:
46:2e:cb:25:e9:c7:4c:8e:d5:72:cd:72:5f:45:24:d0:d4:87:
1f:b7:7c:10:34:09:dc:1d:aa:fa:cd:23:d8:92:1d:ff:67:91:
59:ff:c7:74:31:87:31:bd:60:78:db:2e:03:06:7d:5b:35:b4:
5e:0e:14:ab:f9:40:4a:c7:8c:76:ee:c7:db:a8:e8:0c:1a:97:
69:d0:42:da:2e:f1:91:61:85:16:be:e9:74:6e:7f:e8:91:3e:
7f:42:60:9d:c9:92:c5:08:63:a8:e5:bd:e8:52:cb:5a:4b:4d:
63:ec:7d:36:29:9b:0d:b6:b1:37:b3:c8:5c:c8:0a:e2:68:ff:
d9:18:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:00:33 2025 by rpki-client