Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: MaoFel2jVC4co1b5XqInUSYHeJl+wKFFTuBR/IU6wVw=
Subject key identifier: 57:C1:1D:69:4B:6A:5B:70:7E:F1:77:B8:17:BA:FC:19:58:0C:30:FE
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 01977CB08855E842A19EB516E5D213717C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 13B2
Signing time: Tue 17 Jun 2025 07:00:33 +0000
Manifest this update: Tue 17 Jun 2025 07:00:33 +0000
Manifest next update: Wed 18 Jun 2025 07:00:33 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: krfq2MslzDjE0TOKDjbSToAdnt8CpaiVl1/R0gBSdwQ=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:88:55:e8:42:a1:9e:b5:16:e5:d2:13:71:7c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Jun 17 07:00:33 2025 GMT
Not After : Jun 18 07:00:33 2025 GMT
Subject: CN=57c11d694b6a5b707ef177b817bafc19580c30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:4a:58:98:5b:31:08:01:72:d5:4e:3a:73:
fc:42:11:c5:30:2e:02:7e:71:57:4d:c9:88:63:6f:
59:73:18:cd:fd:32:1c:a5:f6:d4:bc:2b:e6:43:57:
b9:d5:fa:68:c0:3a:af:c5:05:19:71:2a:d2:19:5f:
b7:6d:fe:d8:c7:15:ae:74:93:47:3b:f8:53:0d:49:
79:1e:7e:07:16:36:75:43:02:ea:b6:fe:d6:2b:51:
25:82:bb:87:bc:c8:2b:a0:9d:b9:52:ed:dc:29:d9:
27:3c:92:f5:4e:ba:5c:b4:da:6a:46:05:e2:2d:71:
28:ad:27:99:9e:86:5a:04:c8:60:b5:27:7c:97:1d:
24:71:ba:02:69:b1:ec:bb:a2:5d:d9:2c:e5:41:a1:
38:72:4a:db:70:ff:b0:26:cf:27:d7:c2:32:23:ef:
50:df:cf:55:7a:d5:0a:cf:3a:01:b5:89:fc:35:74:
2a:f1:6e:84:24:20:1a:b3:a0:c5:fd:ad:33:b8:0f:
7f:2d:34:a1:3d:36:bc:78:f8:5f:34:64:d7:00:8f:
57:93:18:48:30:95:dd:99:42:90:15:08:94:e9:2c:
cf:a8:da:59:09:f4:04:f9:4a:5c:d4:78:ba:c7:4b:
bd:07:05:75:ba:28:3e:0e:1d:d5:86:89:ab:0c:79:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:1D:69:4B:6A:5B:70:7E:F1:77:B8:17:BA:FC:19:58:0C:30:FE
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6d:ee:aa:3a:d0:ee:c1:49:b9:59:1a:99:1c:b8:f8:99:bc:
eb:48:a0:9d:7c:50:b5:9f:be:9f:bb:aa:0f:ca:61:3e:5a:f0:
c0:e4:fe:55:00:48:eb:94:b9:3e:85:72:73:2c:27:20:e7:48:
07:f3:3b:5d:5d:0c:90:0a:82:03:d3:2a:de:11:8e:07:a9:9b:
ae:57:f3:65:f0:e5:19:80:f5:5b:39:19:7b:17:e7:e8:e6:c0:
69:67:21:2a:5d:df:6e:fd:ae:08:fc:b8:ad:6b:a0:fe:36:b1:
3b:5e:ab:19:13:6e:a6:e9:42:d4:78:d7:51:12:37:69:44:a3:
a5:84:2c:9d:e2:f8:52:9b:f0:ef:50:b2:d0:e1:f5:bf:0f:d4:
af:25:6f:63:8f:fa:2e:10:c2:e1:b5:e9:a5:a5:f4:16:02:78:
90:92:89:18:f7:8e:d7:0e:42:dc:15:cf:65:56:e0:0a:c6:04:
c4:cc:64:0f:cc:89:80:6a:8d:96:fd:da:6d:9c:1e:b0:ea:f9:
e9:fa:31:13:33:eb:8f:9f:fc:c5:f0:0e:28:e5:32:6b:00:25:
2b:84:56:c0:26:c8:6e:38:39:bb:e9:82:db:47:1b:f5:b2:37:
ee:0f:ef:1b:42:f3:65:f4:9a:46:8a:76:3d:8a:95:08:a8:c6:
14:ae:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:52:43 2025 by rpki-client