Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: et3bge2AL5U9gN3XLUPEBxJUwD4a9dHHj4XdGv4RSks=
Subject key identifier: 29:26:CC:DA:03:5F:26:43:CB:4D:84:B2:C0:42:F3:AC:2F:0B:F3:66
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 0197692A08878F869554541D01F31C4A3F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0E4E
Signing time: Fri 13 Jun 2025 12:00:51 +0000
Manifest this update: Fri 13 Jun 2025 12:00:51 +0000
Manifest next update: Sat 14 Jun 2025 12:00:51 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: 2pA4F0L6H2ShUE1xPVPiqmLrjtKlQLgJe44Y1nyvsRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:08:87:8f:86:95:54:54:1d:01:f3:1c:4a:3f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Jun 13 12:00:51 2025 GMT
Not After : Jun 14 12:00:51 2025 GMT
Subject: CN=2926ccda035f2643cb4d84b2c042f3ac2f0bf366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:0a:ea:eb:03:25:34:c4:be:e3:c3:10:b3:
f6:bf:90:90:0f:3a:11:57:92:99:57:31:32:97:6e:
fd:2b:a5:de:5f:17:e5:69:9b:8c:39:f9:77:c7:18:
8a:df:fb:75:3a:b6:d0:81:8b:b9:36:ef:43:b6:be:
fe:d8:e3:e8:ee:43:11:25:40:0b:da:1a:e8:24:31:
9b:2c:11:5c:17:35:9f:21:9a:84:ad:2f:47:40:b4:
62:ed:a7:d6:43:69:3d:41:a7:4b:08:c8:ac:83:32:
d5:e0:4d:0c:75:0c:a7:92:04:3f:94:f2:b2:e9:f7:
19:8f:16:8c:a5:ca:e7:41:3c:b5:3c:49:b3:1b:42:
a6:32:06:2c:f5:16:8c:8f:99:0b:12:11:b0:99:d3:
00:f6:05:6d:31:34:3d:66:17:bb:4d:68:ff:d4:20:
a6:ff:2b:05:f0:21:88:fe:0f:53:11:1f:4f:2d:d9:
8d:5c:5b:2c:54:56:5f:63:1e:d4:f2:3e:90:13:0f:
9f:76:0f:b7:9c:7a:7c:e1:e8:e4:46:ec:2f:11:7d:
39:ab:4b:66:b5:22:e4:18:38:f9:6b:45:f2:7b:98:
a1:e8:80:59:96:de:1e:a5:36:72:6d:1d:bf:27:23:
0c:76:4b:73:2b:c7:7c:c4:62:66:9a:48:ee:64:01:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:26:CC:DA:03:5F:26:43:CB:4D:84:B2:C0:42:F3:AC:2F:0B:F3:66
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:21:3b:3f:bb:3f:a5:2e:5e:1a:49:2e:2d:c4:6b:9d:ae:6a:
1a:ca:23:50:e4:8c:c9:b5:db:77:67:83:d0:1f:64:18:5d:17:
ef:98:d2:2d:03:91:86:97:50:45:f9:a2:16:75:9e:c5:d6:94:
c9:5b:21:dc:a5:bf:4a:64:92:6c:52:59:09:91:d2:40:2b:e7:
92:a3:35:98:02:8e:55:3b:5f:46:b2:39:23:6d:81:fd:97:3a:
69:7a:ca:51:5f:2d:6e:dc:f0:25:a7:ca:41:ea:0d:b8:ad:27:
b2:bf:40:01:87:70:5f:c2:3e:83:2f:c9:50:1b:22:b5:75:2f:
d8:cf:3b:32:d5:66:bc:79:cb:1b:d1:9e:ba:64:cd:b3:22:54:
bf:34:1a:ce:9d:d1:45:33:52:19:eb:f4:49:a9:21:5b:65:e3:
3e:0e:7e:15:f8:65:c9:94:94:dd:80:b2:ba:eb:bb:08:52:50:
06:db:54:43:2e:fe:d6:ef:2d:f3:91:37:00:f8:48:24:a5:f1:
20:ed:f3:c1:3b:b3:63:28:51:5b:41:c1:77:20:70:83:74:47:
7d:67:e3:3e:01:24:e3:fb:a9:3b:7a:8f:6c:a9:04:0c:c5:dc:
c6:ad:51:c3:4c:8e:26:1e:9b:3f:48:c8:31:46:7c:50:32:d9:
3b:4b:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:19 2025 by rpki-client