Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: 1fPyzYFSjdDTXYmcE5SdI3JPBxDeaYpmoW0xs9EsYfs=
Subject key identifier: 29:77:8E:B6:0A:F0:6E:F8:6B:C0:7C:AF:9F:39:C3:A7:A4:90:95:CA
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 01976929E9257B4E04B08163B47610549D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0979
Signing time: Fri 13 Jun 2025 12:00:43 +0000
Manifest this update: Fri 13 Jun 2025 12:00:43 +0000
Manifest next update: Sat 14 Jun 2025 12:00:43 +0000
Files and hashes: 1: I6XJQzPuO4BQutj9l3SUjZVMBQs.roa (hash: SpNx9acwJnfAUoxlUrPZol91rF8aW3VEekG+fCM8uiI=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: ouD54JKlPZfkZnjYUNxeKD2UqVrTdC8o17zcJb9MK1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e9:25:7b:4e:04:b0:81:63:b4:76:10:54:9d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Jun 13 12:00:43 2025 GMT
Not After : Jun 14 12:00:43 2025 GMT
Subject: CN=29778eb60af06ef86bc07caf9f39c3a7a49095ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:37:c2:8b:67:89:88:79:dc:97:58:d7:00:
7e:a2:fc:76:71:54:e0:fa:31:9e:cd:51:c9:5a:2f:
e7:15:a4:db:d0:7b:82:0c:aa:5b:cf:f7:0e:64:b0:
8e:ee:0b:ca:15:e0:dd:8e:63:e7:1c:4e:56:0a:49:
40:2d:77:8c:e8:4b:b8:27:c6:f2:c0:f4:de:95:20:
c1:61:46:63:67:04:e4:30:c4:af:6c:c3:ee:42:60:
c9:22:c0:f1:4f:d5:59:32:37:64:29:44:ee:fc:23:
56:23:d1:ac:01:bd:9d:11:29:bf:dd:0a:0d:52:15:
be:0e:54:2e:76:95:ea:5f:76:a3:21:aa:33:16:44:
d8:1d:78:f6:b8:b0:9d:f2:49:55:f6:4b:9e:ce:74:
df:45:dd:ab:f7:21:ad:70:09:aa:6f:ea:37:66:05:
66:5d:1a:cf:f6:fa:a0:14:9f:93:9b:47:a2:1e:dd:
0a:83:49:f3:4c:77:85:16:b9:4b:0e:ed:46:74:ee:
80:10:18:d7:ed:af:9e:8e:b3:1f:39:f0:16:4b:1b:
57:a1:1c:b7:77:3b:16:da:99:ea:a0:7b:5e:be:75:
ee:46:87:a7:e5:2b:13:da:c5:61:65:28:d3:f4:45:
0d:d7:a2:66:48:02:67:d3:38:27:49:a2:35:32:71:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:77:8E:B6:0A:F0:6E:F8:6B:C0:7C:AF:9F:39:C3:A7:A4:90:95:CA
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:66:54:96:c2:df:5b:bf:28:59:3b:44:f4:ff:d2:d7:99:0a:
ad:9f:fc:78:af:64:97:f6:50:0f:43:1e:0f:81:b9:72:14:4c:
df:d8:a0:de:51:75:cf:c7:2d:f6:49:5d:b5:45:82:1a:05:27:
6c:8c:38:78:e6:92:44:92:da:55:4d:5f:0e:34:15:d3:b8:a0:
4a:11:1a:df:34:d1:27:49:b9:b8:00:15:2c:86:eb:0e:4a:b2:
df:a6:f0:2a:28:eb:76:3a:13:4b:6f:3e:d0:10:e9:e3:8c:85:
ad:73:2a:b4:c5:5e:27:6a:57:35:d1:c9:93:e4:04:60:d6:98:
0a:de:d5:11:ae:74:ff:d0:6c:09:66:71:db:db:11:df:06:78:
97:9a:70:3f:7d:b6:cc:c9:bd:44:3a:f1:4e:d0:6d:25:c7:26:
54:ba:bf:8f:1e:7c:8f:72:2a:78:b2:29:55:d1:89:ab:3d:32:
55:75:6a:49:99:13:0a:c6:1a:e4:5d:50:a1:55:54:85:6b:78:
9f:84:3b:c7:76:8f:97:07:f0:f3:28:22:6f:05:56:bd:4c:a2:
be:9a:ef:e0:ca:b3:e6:63:07:d5:d2:0e:29:b7:42:24:c3:b0:
76:c3:62:cf:bd:96:46:d0:14:de:38:72:13:08:40:5e:29:f1:
e2:a6:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:42 2025 by rpki-client