Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: HQT9g5pmwa/yrE1fBHHnYBzXudI0+huCLH/8R0bm9/o=
Subject key identifier: 58:77:C3:AF:C8:C7:AE:E9:47:8A:0F:78:E2:48:8F:CA:9B:B9:3E:19
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019768F2A7299414D44BF9598D846B3B3028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 134A
Signing time: Fri 13 Jun 2025 11:00:22 +0000
Manifest this update: Fri 13 Jun 2025 11:00:22 +0000
Manifest next update: Sat 14 Jun 2025 11:00:22 +0000
Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: RFzMlwQE42aklRGtw39OM3jbnX1Ef0dK0QkPF4hnJr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:a7:29:94:14:d4:4b:f9:59:8d:84:6b:3b:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jun 13 11:00:22 2025 GMT
Not After : Jun 14 11:00:22 2025 GMT
Subject: CN=5877c3afc8c7aee9478a0f78e2488fca9bb93e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:e1:33:48:8d:ed:04:28:c2:4f:5c:fb:c4:
e5:b6:6b:08:b7:cc:13:1a:1d:c5:65:e4:b0:88:74:
ed:3c:e9:a9:71:1c:cc:8e:5a:cc:1a:d7:fc:79:38:
2d:df:2a:60:9e:c5:d0:68:60:b7:26:e1:a8:e1:17:
e1:bd:29:bd:17:33:d4:7f:98:1e:24:af:20:1b:78:
2b:6f:4f:86:87:f3:45:99:30:28:20:6f:fc:03:24:
7e:74:0c:80:9b:9f:9d:54:1f:c4:ee:5b:58:d0:78:
dc:d7:81:b6:35:bd:ce:73:b5:7f:33:a9:6b:77:d8:
02:25:c7:35:ed:3c:9e:17:bf:55:f4:04:6e:0b:5f:
f3:76:8a:21:2e:25:81:75:c0:85:10:46:ff:10:76:
11:b2:e8:8f:25:24:95:3e:4c:06:96:4c:6c:7e:07:
f4:31:1d:70:38:3c:d1:d8:49:f4:1d:59:a4:0b:9b:
38:a4:87:e1:e6:59:4a:8d:0a:73:76:bd:08:d3:00:
df:57:e5:27:f8:f2:5c:fb:47:86:81:e1:96:de:a4:
7f:61:8d:d1:cb:fd:62:34:ac:61:0c:c0:15:6a:b3:
35:c2:52:fa:c1:27:92:79:43:18:b1:9a:3c:03:61:
03:ca:7a:e3:02:d2:ec:03:90:d3:e0:ba:e9:f6:31:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:C3:AF:C8:C7:AE:E9:47:8A:0F:78:E2:48:8F:CA:9B:B9:3E:19
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:f1:3b:57:19:e2:33:4c:18:39:d6:88:b9:ba:68:14:32:
8f:16:1b:f0:b3:a0:6e:84:c5:19:1f:3a:41:9a:40:c4:5d:2a:
c8:be:09:6e:e8:b0:5d:f1:cf:95:1f:a7:0f:22:76:9a:fc:de:
3a:3d:bc:00:d2:8d:db:b1:52:d5:5e:8a:5c:8f:e7:3c:0b:e4:
42:1d:35:c4:f9:c5:34:22:cd:cc:dc:2d:eb:64:14:7f:34:2d:
e5:2c:3f:dd:2d:7b:85:f5:1e:3d:63:2e:82:af:14:9f:a8:3a:
58:b7:9a:ab:79:84:6a:d1:34:a2:4d:80:ce:a1:62:95:23:18:
c3:93:67:0d:e0:ff:19:bc:b9:39:83:a1:07:9d:d0:71:2d:a7:
af:29:70:4c:63:ef:7b:da:96:9f:f1:a9:b0:a6:c4:7b:97:84:
52:64:56:b5:ed:76:24:77:67:df:ca:27:60:4b:d5:04:d3:0c:
2e:eb:b2:1a:5e:71:f6:3d:80:fe:12:61:95:e7:9e:68:f8:71:
31:e2:d4:79:2a:6a:08:c3:be:bd:3c:f4:c3:42:de:05:d4:43:
cd:c0:2f:3b:e2:83:c3:26:ce:40:69:6e:48:d0:18:cf:fb:ca:
db:63:15:da:fb:5c:e0:f9:46:b8:03:cb:71:64:44:d4:93:dc:
87:28:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:46 2025 by rpki-client