Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: lvxaOM8voyhC6O7Aog6fAUWr77mClLt4h0IMQazUTK0=
Subject key identifier: EE:67:6D:B6:25:3C:38:EA:CD:68:74:22:87:FF:C1:B6:31:21:2C:9F
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 019769612CBC12BA6AE1BBF371FC2E738547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 1227
Signing time: Fri 13 Jun 2025 13:01:05 +0000
Manifest this update: Fri 13 Jun 2025 13:01:05 +0000
Manifest next update: Sat 14 Jun 2025 13:01:05 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: NE7P6SNWeSgIY0cM4hO41BgURwgZvKjAhFfoGiXcd3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2c:bc:12:ba:6a:e1:bb:f3:71:fc:2e:73:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Jun 13 13:01:05 2025 GMT
Not After : Jun 14 13:01:05 2025 GMT
Subject: CN=ee676db6253c38eacd68742287ffc1b631212c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:eb:7a:e2:12:44:f7:16:f4:cc:8f:3b:35:
b1:50:19:e4:56:d8:d8:06:9a:72:be:c9:29:79:f4:
6f:0e:ff:2d:61:2a:ab:42:c4:ed:9a:db:b1:e8:8c:
4d:5b:d8:20:0e:aa:0d:c3:cb:d1:e9:f2:7c:50:66:
1d:62:d6:83:70:f1:85:21:da:77:78:ec:98:cb:b8:
56:79:f0:86:54:05:b6:d4:de:e0:c6:22:3e:0c:17:
d3:14:e7:00:54:e3:92:38:9f:f8:fc:50:17:b1:32:
e8:87:7e:ca:ed:4c:04:61:b8:d2:5e:0b:89:7f:4b:
50:de:ea:45:b8:f6:bb:36:67:3c:b4:b8:f2:5d:d3:
91:4b:3f:77:fa:79:15:2b:1e:95:ab:f3:91:36:fe:
94:2f:9c:70:b0:de:7a:94:3a:91:95:32:e8:58:7e:
d1:7b:eb:ce:3f:d3:da:47:99:24:64:ba:b2:47:01:
31:f4:02:38:af:84:65:16:04:39:8c:2e:a0:b1:e5:
b8:21:f7:20:81:cc:90:e2:a8:cf:49:0c:37:28:17:
71:10:35:a0:0d:2c:8a:2e:2a:89:21:21:bd:c9:28:
90:b3:89:b4:6b:b1:cf:56:30:34:7e:de:e2:12:ac:
fc:dc:9a:9d:3c:83:7c:78:dc:26:6c:b2:3e:a4:8c:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:67:6D:B6:25:3C:38:EA:CD:68:74:22:87:FF:C1:B6:31:21:2C:9F
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:70:c2:23:4c:34:b7:14:cc:52:b8:cd:cd:b5:ac:3f:6e:5d:
ce:c4:ef:3e:9d:3d:63:1a:2f:87:2a:13:f5:9b:ec:35:cb:6c:
4b:bc:06:f4:d5:f5:22:e7:32:e3:77:cd:00:79:20:10:89:76:
1d:eb:53:7c:ff:64:11:96:fa:ff:10:1c:83:70:59:fd:d0:0e:
53:f7:47:a0:f7:42:de:ec:4c:6b:f8:22:05:b3:89:19:53:68:
6b:b6:55:45:32:01:ac:55:9e:7a:48:59:f3:45:51:dd:85:7c:
7a:ab:53:0f:31:d7:56:35:df:62:a6:b5:3f:42:4a:5b:65:ae:
bb:32:51:f4:50:05:b8:5a:7e:4c:91:f6:7a:43:aa:b9:0c:89:
e3:00:fa:25:a9:0f:bc:f7:11:a1:7b:eb:75:47:6e:38:ed:f5:
3b:8f:cb:ed:68:a7:77:a6:c9:94:34:32:65:a8:87:fa:fa:d7:
89:c1:90:af:48:f0:02:bf:e2:1d:59:79:82:aa:65:1b:b7:b3:
93:f3:72:71:0f:24:3f:39:16:28:18:d2:b2:3c:1e:f1:4d:11:
01:ca:df:a5:d0:7d:17:77:e6:d9:48:45:54:30:8f:cf:aa:46:
2b:e7:d5:a9:d0:48:79:f8:62:00:69:00:c2:4e:fa:5e:08:68:
f6:f1:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:39 2025 by rpki-client