Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: DlcjXASWjX/mYov1ZWmwbSYA9MjYOO5PeZrpiDwc9A4=
Subject key identifier: AC:67:5C:9F:FE:40:F0:5C:D1:61:14:83:F1:CC:8E:4E:E7:AD:73:4C
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 01976D744D7FEB2F0DBAD6B7B172CF122B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 09CA
Signing time: Sat 14 Jun 2025 08:00:27 +0000
Manifest this update: Sat 14 Jun 2025 08:00:27 +0000
Manifest next update: Sun 15 Jun 2025 08:00:27 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: SjamCVOZLOXld+sPUPL4baOEhm+MUAVAPlQz3+iMMNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:4d:7f:eb:2f:0d:ba:d6:b7:b1:72:cf:12:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Jun 14 08:00:27 2025 GMT
Not After : Jun 15 08:00:27 2025 GMT
Subject: CN=ac675c9ffe40f05cd1611483f1cc8e4ee7ad734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:b1:30:1d:a0:d1:f1:fb:5a:6e:9f:5e:a7:
d7:6f:3d:91:8e:12:6f:b6:c2:f1:1f:25:5f:27:ff:
97:89:75:63:07:78:7a:bc:61:3c:b1:d7:05:6a:e5:
4b:f8:37:41:3a:9e:98:e8:7d:84:14:5d:08:86:ad:
9b:7d:54:ee:0c:d5:c4:89:21:f1:f6:07:75:1f:5d:
55:94:fe:b5:39:74:dd:77:34:45:ba:c9:5a:0f:c2:
05:f4:bb:5d:d1:b1:d5:74:84:35:3b:12:ea:3f:a9:
bc:cf:42:0f:25:83:2e:d7:4b:c1:84:41:03:b2:31:
ae:7c:61:ad:55:54:3c:e5:35:b7:7c:24:55:23:a5:
a6:90:0e:78:25:68:18:ba:68:e4:09:24:89:e4:c8:
e8:47:7e:2f:14:1c:e1:1d:ca:28:60:fb:de:b3:32:
28:e4:ac:83:a3:4f:74:b3:6b:35:4f:5a:11:c1:e2:
7f:7d:4e:1f:d9:26:60:63:95:63:d3:9e:71:1d:43:
21:da:1d:30:c3:7e:e9:0b:e1:77:22:46:44:3a:01:
39:bc:8e:5c:88:a6:d8:d7:be:b5:37:39:dd:58:68:
8b:63:af:08:89:85:d5:d7:41:53:81:4a:e5:cb:67:
09:79:25:72:e5:d8:8b:59:d2:7f:be:b7:c1:05:2b:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:5C:9F:FE:40:F0:5C:D1:61:14:83:F1:CC:8E:4E:E7:AD:73:4C
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:1a:cc:23:87:44:ea:ee:f9:50:ee:64:f9:ad:2f:ae:df:
7b:9c:c9:4a:57:09:74:33:2c:3c:c1:a2:7f:1b:5b:25:38:c6:
d3:72:a8:ae:9b:3a:a2:d7:09:fc:ff:87:27:4c:8b:73:fd:f7:
99:ef:bc:4b:6b:e6:90:d4:f4:62:03:ac:1f:7b:89:7e:eb:fb:
ed:f4:f3:d0:0c:ab:b8:50:af:b0:03:64:49:71:7c:51:28:c1:
75:f1:3c:e9:58:4d:99:00:2e:12:aa:7a:f2:ba:a1:2d:7a:c7:
a3:df:f9:2a:dd:de:4b:92:30:c3:d6:68:97:80:03:72:e1:4c:
70:96:d4:cb:75:a8:40:da:53:07:ee:cb:2d:7c:14:5a:10:0f:
11:72:a3:48:a8:9d:1b:a4:df:1b:34:f2:c2:c3:8d:5b:dc:3f:
ac:b0:5e:f0:1d:fe:3c:70:4b:3a:63:e2:23:ba:32:0f:a6:27:
05:7c:fc:2e:b7:af:67:1d:de:4c:15:f5:c0:d3:ce:89:f6:d6:
46:9b:84:5c:4c:e1:13:61:41:8d:23:8e:13:39:96:0d:82:07:
75:bd:92:90:4a:a7:24:d4:da:5f:3f:7e:6d:ed:e3:dc:d8:97:
12:a2:98:d4:2c:9e:3b:5a:39:30:76:c1:f8:82:c9:e8:d3:ba:
29:9a:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:43:43 2025 by rpki-client