Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: w7HMhF2CER3A30O5S5lIwgKPra/MYlMMQY8lTIeqX1o=
Subject key identifier: 09:36:D8:10:19:F3:D6:0A:58:12:A6:75:B2:0B:57:D7:67:23:FE:35
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 0197808E576760BFF628308E791F047383E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 13F9
Signing time: Wed 18 Jun 2025 01:01:41 +0000
Manifest this update: Wed 18 Jun 2025 01:01:41 +0000
Manifest next update: Thu 19 Jun 2025 01:01:41 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: Rax+qCtsPfZ3VjeunEvZTBTo7cMN27HCHjfUHPYIWVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:57:67:60:bf:f6:28:30:8e:79:1f:04:73:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jun 18 01:01:41 2025 GMT
Not After : Jun 19 01:01:41 2025 GMT
Subject: CN=0936d81019f3d60a5812a675b20b57d76723fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:ef:a2:63:d2:fa:a9:df:6b:80:2e:c9:3f:
8a:9f:fd:9e:4e:8e:79:90:65:23:8d:cf:7b:82:f1:
24:32:d5:6e:b6:6f:69:80:93:44:88:03:b3:fb:d8:
50:02:a2:38:35:83:cb:67:3e:10:8d:fa:02:7f:fe:
fb:82:a3:ce:5b:49:b6:ad:9d:f3:3d:e6:1b:c7:8d:
a1:16:7b:f5:b7:5d:7a:76:2e:a8:32:a8:72:4c:d6:
25:6f:ae:85:03:10:d7:e6:13:51:1a:76:17:8f:22:
55:55:83:6c:3b:b5:4d:d2:45:d1:a2:4b:2e:fc:f5:
b5:c6:db:5c:d4:72:f5:11:70:60:8f:41:e6:66:eb:
32:6f:83:21:de:55:70:45:aa:1d:7a:c8:26:ae:9b:
ca:43:54:ee:93:43:c2:24:39:b4:15:0c:74:a1:dd:
d6:95:41:bc:0a:ad:8f:73:91:9b:bf:79:a7:4d:44:
a0:56:42:2e:7c:16:d8:6a:f7:09:b0:d2:d1:6d:2c:
9e:d5:97:d0:fe:fc:93:6d:a6:bc:6f:e5:bf:4b:6d:
64:43:18:31:c2:07:b6:39:91:b7:95:5b:2e:3d:c5:
47:f1:30:12:5f:75:94:9b:7b:a6:b5:f0:2b:3f:7e:
3c:d5:65:9d:a0:c9:12:9c:b0:37:23:fb:a9:2f:b2:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:D8:10:19:F3:D6:0A:58:12:A6:75:B2:0B:57:D7:67:23:FE:35
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:7b:4b:3e:e7:fe:a4:93:f3:d0:24:5c:df:78:0d:6a:33:
c3:00:7e:43:96:24:ed:ce:2d:f4:a9:90:43:f1:bc:1e:ed:d5:
cb:ea:53:1a:c0:0e:33:16:ce:53:b0:a6:a1:de:df:de:0b:21:
b3:47:37:60:91:94:07:42:ee:2e:db:5a:03:95:ce:65:af:dc:
af:b9:68:67:11:c4:13:8e:b0:a1:1b:8d:76:f0:c7:02:f2:aa:
7e:9c:0d:f4:cf:c6:b2:ec:63:e2:71:53:38:48:16:bf:19:86:
0f:3a:44:dc:43:cb:db:8d:33:6f:fd:52:36:24:d6:e3:e5:86:
ee:c6:54:7f:98:28:70:ac:3b:92:01:44:27:b2:1b:ae:f6:5e:
42:05:38:42:45:3e:27:c7:f5:3a:3f:24:4b:68:8a:9b:8f:1d:
c7:69:0f:9f:10:76:fc:48:52:55:4d:9c:2f:da:e9:ad:4b:e5:
ad:d1:9f:46:95:c5:5b:f1:b6:d9:46:a3:41:9f:2e:2c:49:f3:
48:f2:3c:4a:f0:a5:a1:fb:9a:aa:1d:03:81:80:49:7e:fe:55:
af:07:ab:9e:59:00:0f:a7:07:77:56:4f:d4:f2:dc:52:d1:c7:
82:c3:b6:98:36:d1:48:6b:eb:54:6d:6a:ae:cd:70:6b:3f:43:
b9:05:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:44:29 2025 by rpki-client