Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: CEnkZfM6WDcA9NnpGeLGsO9RmZBi7Ho6pAnjuvZ4RqM=
Subject key identifier: 64:A8:51:D7:FB:A1:8A:5F:B7:B6:89:C6:D2:64:3E:D9:76:98:82:1B
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 01977E9F868F7D826CB43E25DE3F3FD8B7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 1595
Signing time: Tue 17 Jun 2025 16:01:13 +0000
Manifest this update: Tue 17 Jun 2025 16:01:13 +0000
Manifest next update: Wed 18 Jun 2025 16:01:13 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: KRbD0J5HD6KA+7H8frMDSwuiY2LQBYt86Jk+jOFBH28=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:86:8f:7d:82:6c:b4:3e:25:de:3f:3f:d8:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Jun 17 16:01:13 2025 GMT
Not After : Jun 18 16:01:13 2025 GMT
Subject: CN=64a851d7fba18a5fb7b689c6d2643ed97698821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:2c:17:bf:29:30:fb:c7:8e:cc:dd:cc:26:
05:6c:ef:df:29:36:9c:88:12:f5:65:82:08:d2:be:
1f:f5:ca:ad:d0:fd:af:ea:dc:9d:6a:60:0a:c0:f9:
02:0f:bd:bf:17:25:aa:74:3e:27:21:1d:ef:38:c7:
c1:17:f4:74:66:67:b2:12:03:ee:4d:f5:ba:95:47:
54:1b:55:47:df:41:42:8d:b8:ba:96:f0:64:7f:4f:
82:07:f8:0d:a8:9c:88:45:62:d7:b5:ec:0a:fa:a5:
e4:57:70:2c:a4:53:d5:e8:92:79:9a:0f:94:7b:39:
a5:39:1b:f5:e5:ee:5f:09:c3:9d:28:0f:8f:61:48:
bc:0c:ad:6a:c5:87:57:ab:c8:76:fe:7c:cd:76:21:
7a:5a:7c:c0:36:93:2f:2f:7c:92:55:b0:f2:4e:77:
78:5c:42:2d:a4:c3:5f:05:5b:0e:bc:48:8c:9a:39:
29:ef:eb:63:b7:6b:37:10:3d:de:af:67:e2:6f:5e:
97:d3:01:f2:7c:e5:cf:a0:2d:cb:3e:ae:a9:72:fd:
27:c4:8d:2d:76:35:75:df:c5:5b:59:16:97:5b:46:
81:4e:b6:94:3d:80:6e:78:4a:9c:08:ae:4d:da:96:
98:d3:a1:2c:9e:81:a1:4a:0a:d7:15:28:02:59:1c:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:51:D7:FB:A1:8A:5F:B7:B6:89:C6:D2:64:3E:D9:76:98:82:1B
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:49:ea:53:43:c3:fb:eb:3b:3c:a8:36:cd:15:d7:7c:41:a8:
50:63:1c:87:dd:41:2d:e9:d2:a9:29:ec:b0:91:de:f9:95:58:
a4:60:12:53:30:69:06:e2:d5:5d:91:6b:35:d7:73:bf:6a:f9:
14:c5:63:7f:00:e7:86:f1:82:ad:1c:2a:e8:2b:e0:2b:54:88:
cf:74:fc:63:41:f8:ff:77:1a:f5:44:27:aa:05:0c:e5:e9:8c:
77:6a:bc:25:ba:70:f1:be:70:29:a6:75:e2:63:99:6f:84:13:
ee:2c:e6:67:f2:ad:8f:e5:4e:34:9a:44:aa:eb:d6:82:5d:d0:
a0:49:a5:5e:fd:e0:1e:d8:a4:32:02:46:97:65:c8:13:b1:58:
59:a1:12:77:6a:1a:94:6e:6a:bc:42:bc:7f:79:35:ea:86:62:
f0:92:51:98:7b:c9:c9:a9:31:9a:fb:6c:37:ba:96:eb:c5:97:
2e:da:bf:48:bd:b7:6a:70:fd:e3:3a:db:1c:b9:98:e8:5a:8a:
95:13:89:e0:bf:d4:38:95:aa:64:eb:99:8c:37:bc:0e:2c:ab:
ab:cb:7a:e6:f2:77:e3:61:2e:95:d2:3f:a5:8e:e1:61:a3:1b:
4e:42:7c:94:19:e0:d2:df:79:c3:d8:8f:07:bb:43:77:f7:6c:
fa:41:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:15:28 2025 by rpki-client