Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: G5GyR3a73RirQJ8o3bFPJIjenT/IcY2h6Cm8yqos9+I=
Subject key identifier: B6:69:53:8F:61:B9:51:6B:81:7D:31:18:50:3A:F9:E8:52:3F:A6:E1
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01976BF4A9A9B9FCC3DCAFF99503100F62E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 05B7
Signing time: Sat 14 Jun 2025 01:01:25 +0000
Manifest this update: Sat 14 Jun 2025 01:01:25 +0000
Manifest next update: Sun 15 Jun 2025 01:01:25 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: E0bBCLEKBiYjSnuQusq2iROAQflJq0mMhYd2onJNEeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:a9:a9:b9:fc:c3:dc:af:f9:95:03:10:0f:62:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Jun 14 01:01:25 2025 GMT
Not After : Jun 15 01:01:25 2025 GMT
Subject: CN=b669538f61b9516b817d3118503af9e8523fa6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:3f:2e:d6:6d:54:86:37:27:c3:6a:18:4e:
43:46:f9:b3:61:04:4f:46:24:cf:4b:78:70:a7:77:
92:7d:2a:44:44:46:9d:a0:e0:c3:9d:f0:ef:fd:75:
be:f1:f0:a9:2e:3e:9a:77:f3:1c:fd:ee:eb:20:3f:
10:19:85:f6:bd:25:ad:af:cf:2d:50:19:8e:bd:9c:
f9:4c:1f:7b:be:da:fc:b9:33:ac:ac:ff:85:69:22:
5b:7c:22:7e:77:77:b4:b0:23:60:f4:cf:c7:b4:0a:
27:1f:dd:ab:c8:88:06:6c:0d:53:25:da:ff:d4:26:
b5:02:4c:33:c2:b9:16:4c:39:08:52:b6:9e:ea:13:
06:cc:37:64:e9:e0:fb:b5:3d:b3:84:67:8e:a5:1d:
99:7d:35:55:da:f9:1c:85:2d:34:ef:5c:23:78:9b:
a4:9b:7e:88:58:66:00:a8:ec:31:8c:bc:9b:5c:39:
7f:02:e4:23:fb:e8:b0:e5:9d:33:43:64:8a:a3:bc:
73:e9:42:e1:c5:12:ee:86:e4:d9:41:22:32:bd:8e:
a2:54:af:01:47:2c:30:c8:69:12:f7:ad:32:ec:7e:
98:d2:a7:41:6d:a7:d7:3e:3f:bd:44:b5:9b:ac:d0:
7b:30:3e:8e:a7:56:22:e4:28:eb:01:af:07:48:22:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:53:8F:61:B9:51:6B:81:7D:31:18:50:3A:F9:E8:52:3F:A6:E1
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:3b:e3:f2:22:8f:3c:49:79:74:41:e6:26:f5:69:4c:16:
56:b7:34:61:91:77:10:b0:d6:dc:1b:e4:c4:55:24:dd:1e:33:
6d:19:ce:a0:ae:df:9d:18:42:74:db:15:24:14:01:71:f9:13:
ee:cf:7d:17:39:bc:85:1d:3e:d4:7e:75:e5:a2:e2:ff:02:e1:
cb:76:26:c4:1b:72:5b:21:a0:58:f6:78:9f:b5:97:9e:77:a1:
f1:0b:0c:49:b9:8e:0c:c6:77:76:ea:fb:1a:8f:a1:5f:e8:9b:
34:a2:d7:84:50:70:c6:b1:a5:e7:7d:cb:19:be:7b:fe:43:fd:
c5:b5:a0:4e:05:6b:d7:c8:ca:f0:ed:6e:bf:1c:23:5f:6b:e1:
4a:bf:c1:5b:65:02:b0:78:c4:f2:ff:d5:5c:fc:f0:26:3b:27:
08:27:06:14:84:e3:8b:fe:fa:8b:66:70:cc:a6:39:c5:ca:ed:
77:5c:5c:e4:1c:2d:35:99:0e:ab:ac:e8:02:bd:8e:7f:73:4a:
40:dc:2b:32:67:ee:a6:e5:9b:ad:79:00:02:da:63:82:ee:93:
c8:19:25:cb:79:78:f9:e2:ea:ed:68:77:b4:91:26:bf:8f:8b:
ef:23:d8:77:69:86:bc:ad:2f:d3:90:d4:ef:ea:1a:e5:86:5e:
6f:83:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:54 2025 by rpki-client