Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File: j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier: 42cju16veaU2e81CadDbzX6Uy7E2gn2BXNzDS387oes=
Subject key identifier: 9F:A4:68:0F:7A:32:7F:4D:7E:70:A0:E0:28:45:54:55:BC:ED:1A:29
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 019874BE22BF2689D6F89F6529D205847646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 11:01:14 +0000
Manifest this update: Mon 04 Aug 2025 11:01:14 +0000
Manifest next update: Tue 05 Aug 2025 11:01:14 +0000
Files and hashes: 1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: 1UyPhIircxMupGj9mcVUHcrRbxPQ9IKNuHo4oU4FmYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:22:bf:26:89:d6:f8:9f:65:29:d2:05:84:76:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Aug 4 11:01:14 2025 GMT
Not After : Aug 5 11:01:14 2025 GMT
Subject: CN=9fa4680f7a327f4d7e70a0e028455455bced1a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:87:3b:52:db:5e:ce:b7:e8:b8:ac:5e:ad:e4:
9b:ec:c9:21:a4:c0:41:f6:21:5e:a1:76:74:18:79:
d3:07:a5:6d:f5:2f:1f:54:47:a5:79:19:53:a8:99:
05:6a:c0:96:f7:9e:49:b7:84:c6:6f:73:34:c9:2f:
12:fc:f6:77:06:d4:30:7e:bf:e7:cb:07:53:09:71:
1e:a2:30:2c:6c:81:45:59:e1:ac:aa:c1:d3:ad:48:
b8:c1:48:0f:09:98:f7:00:88:ba:7f:3f:17:fc:88:
d9:2f:05:c4:8b:12:c1:48:b4:52:5a:62:7b:8d:28:
55:19:9e:e6:da:dc:a5:ba:f1:9a:8d:0b:2e:9b:52:
7a:b6:13:89:f5:48:3b:a3:cb:ad:46:fa:a4:ee:61:
82:a0:88:75:f5:a5:02:5e:51:63:cc:50:5c:cb:d1:
bd:4e:4d:8b:6b:dc:a6:b8:2f:d8:d2:50:61:1b:16:
8c:f5:98:33:0f:a4:a4:ad:25:5c:a8:b1:14:42:50:
d3:f0:4b:15:da:3c:24:35:27:ce:bb:21:ef:d9:2b:
a0:4f:87:31:78:f1:48:38:f0:43:cd:fb:93:6c:10:
19:fc:e4:69:54:5b:82:46:a6:c1:31:7b:cc:89:41:
69:60:48:92:dd:08:a8:24:21:1a:26:8f:bf:7c:70:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:68:0F:7A:32:7F:4D:7E:70:A0:E0:28:45:54:55:BC:ED:1A:29
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7b:e4:47:f0:78:6f:eb:b5:5e:e3:0b:35:6c:e6:93:d7:71:
a8:e5:1e:74:c8:df:70:9e:a1:9d:0b:16:b2:59:13:75:a7:44:
f5:8e:fe:a7:cc:49:7d:be:ab:32:53:95:56:59:5c:8b:02:b1:
f3:d7:e9:2a:b9:df:5d:13:d3:fd:f3:b9:af:8b:97:92:87:f3:
a1:75:bc:32:f3:70:30:87:0a:ac:8a:90:bc:a5:84:52:85:55:
08:fe:29:d4:b5:5d:9a:fc:7e:ac:f5:64:cc:4e:92:3f:4e:7c:
d3:b0:6f:0b:ab:8a:af:8d:f2:da:11:7d:e9:7b:36:24:5d:e2:
29:ff:69:72:b4:52:b4:31:34:23:9d:db:45:6b:a0:ee:e1:12:
52:19:69:51:75:52:61:f1:f4:89:7e:17:fe:e2:bb:c3:1d:ea:
da:3f:5d:6e:b3:0c:81:f4:a8:8b:8d:aa:90:f1:c4:04:19:1c:
b2:da:b6:58:c2:1c:56:fc:65:d2:26:d3:d2:e2:25:87:95:9c:
cd:76:f5:79:b5:75:5f:4a:d0:e5:54:36:d6:c9:fa:6b:23:43:
75:30:17:fd:53:b2:56:dc:ba:88:c8:6f:29:ac:17:e9:de:00:
bc:f0:4b:ec:ca:2a:80:ae:e7:f6:d4:4f:f5:23:7f:25:35:5d:
b3:c0:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:39 2025 by rpki-client