Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: VKiyxzsC31SCVWvsfzf6lYU1P+4164gJTxZndM8V0YM=
Subject key identifier: D3:DD:D3:ED:A5:72:FE:20:ED:8E:38:64:EB:41:FA:B8:0B:86:11:9F
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01978244AF3E2FE728B1E65CE622CD926389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 0596
Signing time: Wed 18 Jun 2025 09:00:28 +0000
Manifest this update: Wed 18 Jun 2025 09:00:28 +0000
Manifest next update: Thu 19 Jun 2025 09:00:28 +0000
Files and hashes: 1: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: KGVTwJBs7flbQcfdUD34wJ1KGs3x5TOkmCBz3XJHbXo=)
2: lIekyAF1vFrBNRH4d8ID5Tg4s8g.roa (hash: CIu3WPmKAOFJpK2NOy2tomoWEUjkQIwmoDzyFQ6GyCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:af:3e:2f:e7:28:b1:e6:5c:e6:22:cd:92:63:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Jun 18 09:00:28 2025 GMT
Not After : Jun 19 09:00:28 2025 GMT
Subject: CN=d3ddd3eda572fe20ed8e3864eb41fab80b86119f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:21:49:ad:87:60:96:59:80:c6:f4:54:54:53:
86:92:c7:67:d9:f1:87:97:d9:a6:0b:8e:96:63:18:
a5:e5:07:c6:21:8e:ff:cd:ec:d2:a8:6b:3e:c1:33:
2d:ea:91:db:ee:13:45:b7:8e:d7:a9:a8:24:fb:c2:
b1:80:07:bf:74:a7:09:70:79:40:19:5e:65:40:b4:
45:03:7c:5e:8b:33:e2:ec:4d:f5:23:00:c3:43:a0:
09:1b:a3:da:be:48:0c:09:c0:dc:e8:04:07:3e:c4:
08:bf:55:43:9a:b7:f2:14:26:32:b1:04:38:65:47:
5a:4b:d7:97:88:70:74:ad:2e:bf:31:4b:4c:a7:12:
45:85:34:7b:fb:70:6d:6f:28:60:7a:e0:1a:37:8b:
8e:eb:96:a8:e0:bc:ed:45:64:89:81:fa:b4:44:0f:
b0:b4:48:9e:c6:e1:74:b4:fa:0b:95:06:6f:34:a7:
3a:73:71:32:3b:30:6d:40:0c:4e:04:38:e5:22:1b:
53:3b:90:00:da:3d:79:b6:a7:07:3e:e7:48:e7:82:
54:92:9f:8e:f7:d7:d3:8d:24:d0:e8:be:a1:ea:ec:
7c:0b:b3:a6:7a:c2:2c:72:91:69:78:f9:8c:5a:19:
be:30:70:20:16:83:94:d6:bc:59:13:32:f7:94:90:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DD:D3:ED:A5:72:FE:20:ED:8E:38:64:EB:41:FA:B8:0B:86:11:9F
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:ee:e8:00:ec:43:42:0b:40:3b:eb:6a:7f:69:f8:6f:e6:
c1:f9:c1:47:af:01:d4:d1:45:d1:0a:c2:0a:c5:86:07:4f:c2:
44:6b:a1:cd:8b:a4:8f:c7:d3:6e:f5:a6:26:2a:09:f7:ae:3d:
b5:59:eb:72:89:df:e7:78:9f:a8:93:8d:f8:6f:58:e4:7a:23:
41:cd:68:fc:7f:64:82:74:2f:f7:c2:49:3d:3c:4f:8f:b7:65:
80:86:21:33:e9:4a:81:07:41:d7:c9:05:c2:aa:8e:b8:d3:71:
35:7c:de:01:2d:0f:ad:93:ed:d0:f9:63:52:50:1b:d1:3e:97:
b8:70:c6:60:f6:21:55:9b:e9:e1:e6:2b:f7:7a:8a:34:91:50:
8e:3c:38:9e:af:54:67:e2:b0:24:27:8d:77:73:ac:f1:2d:96:
20:1d:78:3c:a4:41:c1:1e:f0:3b:36:a5:fd:11:0b:bc:62:32:
01:a5:96:f3:84:95:ac:c4:c8:56:8b:2b:2f:02:a1:65:9a:6c:
66:19:1e:47:35:95:5f:3c:fd:66:e7:12:a2:70:21:7c:44:f0:
44:62:57:27:ce:47:2d:8d:60:6e:e7:a4:ff:40:9a:2c:43:f9:
dd:18:de:c8:ed:f1:04:20:04:bb:8a:43:6b:3e:34:f8:ea:bd:
18:04:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:49:43 2025 by rpki-client