Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: Vo2INnaFhh4CnHX3b7PMH6Y9LGd3OzpQs15tslTiHw0=
Subject key identifier: D2:B1:C6:B2:1B:82:1B:0B:EB:8B:4C:94:68:BE:FC:9E:F8:D3:52:50
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019770081E2DC48AFB1336AA832D5606F408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 20:01:09 +0000
Manifest this update: Sat 14 Jun 2025 20:01:09 +0000
Manifest next update: Sun 15 Jun 2025 20:01:09 +0000
Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: YK4UaaN3Si/GycT9JwG8WKRREqZQgsxPQyC5ro6BUNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:1e:2d:c4:8a:fb:13:36:aa:83:2d:56:06:f4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Jun 14 20:01:09 2025 GMT
Not After : Jun 15 20:01:09 2025 GMT
Subject: CN=d2b1c6b21b821b0beb8b4c9468befc9ef8d35250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:f1:e1:2c:6e:38:a4:36:7d:fe:a7:3b:3d:
02:b2:38:a5:ec:55:67:be:2c:58:1f:f8:1b:92:16:
2f:8b:6c:3a:2a:71:b9:01:ac:aa:83:c6:6a:6c:49:
49:4e:e2:e2:b5:37:0d:7f:a5:d7:20:f2:bb:51:d1:
0f:40:2b:ad:c7:32:b1:66:f0:32:50:a6:21:b9:65:
c8:4d:02:81:90:04:01:ec:a0:14:7a:72:2d:0b:b3:
c7:1e:47:41:92:a9:f1:8a:3f:c8:7d:9a:21:dc:9d:
ca:d7:9c:9e:3c:dd:c0:48:e5:36:e9:d7:83:2e:d0:
a4:c4:ce:88:e4:b9:6c:e9:17:9e:9d:90:dd:4b:a5:
60:cb:ab:ed:cd:d1:73:ff:3a:d9:e1:c3:6d:53:51:
29:06:fc:09:27:d5:6d:e9:25:be:f8:3a:bf:48:a0:
a5:e3:c0:15:49:54:75:84:0d:5c:82:ad:d4:05:14:
2e:10:80:76:ce:94:09:bb:cb:62:7c:67:8f:b3:16:
d6:5e:04:ca:27:12:a7:4d:53:ce:42:d6:9d:ba:c4:
6b:43:d5:b0:b3:84:23:e0:a6:04:9b:93:7c:6b:c4:
b8:39:dd:4b:bc:a5:20:4e:37:f2:8d:12:2d:a9:fb:
56:49:7c:ad:05:ed:d7:b3:d0:f2:fc:2f:83:48:ca:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:C6:B2:1B:82:1B:0B:EB:8B:4C:94:68:BE:FC:9E:F8:D3:52:50
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:51:61:5c:d1:3a:fa:92:b0:8f:b7:f5:22:fe:dc:5e:66:21:
f6:3b:62:9f:a8:aa:34:37:fa:1e:54:9d:53:1b:fd:71:4c:bb:
75:2c:5a:ad:68:28:f0:db:50:d0:4b:2f:2d:b5:42:e8:7d:9a:
05:77:82:2a:9a:96:f4:33:63:56:07:8b:e1:3d:3e:8a:7f:a3:
b9:39:08:3a:5f:32:00:4d:be:90:38:d4:59:7e:f5:b3:20:8e:
6d:bf:fc:60:2e:dd:9a:14:62:b8:d1:d5:0b:5c:5d:d4:e1:d3:
9e:1b:a5:0e:10:7d:6a:14:79:07:c2:55:28:a5:21:c2:1e:7c:
26:08:db:16:26:00:9e:9b:3f:f3:02:aa:3b:9a:73:18:cc:4a:
f8:18:75:28:d1:75:98:44:b7:67:da:e3:05:0f:d2:ab:6b:d6:
cf:3b:57:a0:70:b0:6c:ac:61:bc:6a:29:32:9a:11:1f:b0:3e:
54:0f:a9:c2:0f:3f:14:b7:ef:ab:35:26:47:62:b9:78:f4:69:
51:e0:9e:5a:67:1d:37:f9:c1:83:57:f4:26:80:c9:d8:cc:56:
1d:df:fa:4e:09:58:81:c6:f3:cc:d9:eb:d7:c1:bc:54:c4:77:
13:c6:fd:8c:7f:e5:23:32:d9:4d:ae:0d:4a:05:02:ad:ce:d2:
df:12:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:54 2025 by rpki-client