Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: ZrafBoj0JJalivbXs1VK6dSLwK+i9gKz4YnumOcoau0=
Subject key identifier: ED:07:5E:27:E9:BB:FA:BC:0D:BC:51:B4:06:77:8B:81:6F:5B:85:71
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 01976F62FDD893564A73643B60B57ABC000A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 020A
Signing time: Sat 14 Jun 2025 17:00:47 +0000
Manifest this update: Sat 14 Jun 2025 17:00:47 +0000
Manifest next update: Sun 15 Jun 2025 17:00:47 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: oQqbDbeFMZnyPM0R61dYbqhsvVuePwanJxiXabZIiYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:fd:d8:93:56:4a:73:64:3b:60:b5:7a:bc:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Jun 14 17:00:47 2025 GMT
Not After : Jun 15 17:00:47 2025 GMT
Subject: CN=ed075e27e9bbfabc0dbc51b406778b816f5b8571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:93:68:7c:98:4e:26:40:37:2d:fb:3a:83:
c0:f7:30:40:4d:52:72:8e:5e:c0:ec:a5:2c:5b:80:
1a:49:c0:6d:48:36:cf:fd:8c:6b:f9:1d:ca:d8:25:
6f:e2:66:e3:50:9c:6e:84:34:d0:43:48:59:37:0f:
ed:93:69:84:86:42:dd:54:39:0c:9a:be:83:90:1f:
04:17:aa:df:9c:8e:e9:26:7e:dd:e9:73:22:e0:52:
53:0b:a9:38:c3:fe:2b:1c:a9:d7:e7:ab:4b:be:df:
f6:6e:74:18:c4:f5:3c:e9:75:3f:8c:0b:e4:fa:05:
c7:e1:0c:ad:53:b0:06:7b:46:4f:d7:e7:4e:ba:83:
ae:ca:8f:91:af:05:1f:cc:64:42:4d:41:10:a3:72:
0a:d2:c6:bb:51:da:e0:46:da:22:5d:a3:40:ed:6a:
f1:74:c3:6c:eb:e5:39:ca:48:62:50:91:25:4d:d7:
90:e8:03:cc:00:13:cc:b7:26:d3:6c:b0:89:d0:20:
cf:9f:b4:83:e2:1d:d5:0d:ad:bb:5e:1d:42:42:b8:
3e:46:69:47:d9:79:30:cf:7f:47:8f:b6:2b:44:81:
7d:95:0f:41:b7:d0:63:50:8a:3e:b1:0a:20:db:4d:
c8:cc:93:48:94:2d:4d:37:ce:50:d9:5e:4f:54:a2:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:5E:27:E9:BB:FA:BC:0D:BC:51:B4:06:77:8B:81:6F:5B:85:71
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bf:c0:79:bb:b9:60:ec:f3:75:34:7b:da:78:3b:73:eb:6c:
be:08:99:45:68:d2:d7:5a:c7:b0:2f:4b:a9:13:71:b2:1e:c3:
38:1b:fa:33:68:0b:41:91:53:e5:1e:82:c0:47:b3:74:9d:c5:
46:62:15:ea:82:b0:62:90:40:58:ce:1b:79:dc:9c:52:9a:78:
50:63:70:99:a9:fb:35:82:21:0a:55:8c:cd:4f:13:51:86:1a:
5c:7a:19:68:3a:58:af:99:4c:8e:10:b6:01:b9:66:55:79:a4:
03:b9:ad:2e:aa:4e:aa:09:14:29:2c:0a:06:4b:a3:f2:c5:31:
49:28:2c:34:21:5c:be:0a:2f:42:f8:30:f4:02:13:4d:b8:59:
03:62:5a:84:8b:7c:92:58:cc:40:6a:19:3f:34:4b:d2:16:fb:
4b:74:de:8b:85:43:8a:78:55:ef:5f:a7:cf:bf:ec:d8:26:08:
b6:09:89:4a:14:49:93:87:a5:54:47:ad:33:27:63:dc:49:e4:
62:e8:41:62:f3:38:49:93:76:d2:0d:0f:be:93:dd:d5:47:5e:
57:bc:bf:67:d1:d4:ee:e3:58:5c:4d:8b:6e:61:07:f9:23:0d:
bf:eb:90:99:86:0c:25:69:7f:a6:d9:69:ef:27:28:1f:97:79:
46:a0:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:35:36 2025 by rpki-client