Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: 5QXz05yMHolLz9bjqSMsHNlVk+DTR7vkZ8dlSmU680Q=
Subject key identifier: 27:E3:20:BB:B6:B9:7C:D7:4C:21:AF:BF:CB:98:7F:B9:CE:C0:B2:54
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 019770AC704A7D755564B63A833D83B2DE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 02B9
Signing time: Sat 14 Jun 2025 23:00:38 +0000
Manifest this update: Sat 14 Jun 2025 23:00:38 +0000
Manifest next update: Sun 15 Jun 2025 23:00:38 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: ibyv/wjl1lDVNa7DJH2XjCjwAhiPjpyQh6WlJyoG9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:70:4a:7d:75:55:64:b6:3a:83:3d:83:b2:de:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Jun 14 23:00:38 2025 GMT
Not After : Jun 15 23:00:38 2025 GMT
Subject: CN=27e320bbb6b97cd74c21afbfcb987fb9cec0b254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:00:27:18:ee:49:26:2c:dd:69:9f:b9:62:
6c:34:a4:ce:d4:83:c3:10:12:f0:cc:46:59:b0:bd:
68:99:17:06:3f:c0:e7:c4:65:42:06:63:75:66:fb:
78:37:76:63:b3:1c:cf:11:4a:4a:6d:bc:6d:c4:8a:
e1:ce:5a:a8:ba:15:1d:98:29:9a:18:30:1a:da:2d:
5e:44:09:0a:e2:49:5e:c6:82:df:6b:a2:bd:29:d9:
b0:2d:de:f8:ad:d2:28:ee:2a:aa:62:b3:06:05:d5:
1a:a9:89:4f:c4:4b:b0:85:39:78:38:92:31:e1:fd:
63:ad:ef:e9:37:f6:2a:11:d7:b9:60:f9:b9:72:28:
26:0d:2c:f7:80:39:47:6d:d6:74:e9:10:c4:7e:77:
4c:76:47:60:d5:44:ac:74:9e:91:ca:b0:ba:d7:69:
b1:b3:73:98:e6:38:b1:71:96:a0:d5:41:8f:a8:6b:
b6:72:74:3a:c0:6d:bf:83:fd:e4:eb:42:cc:65:53:
cd:94:f8:39:ab:d7:0f:77:a4:b7:30:d9:1c:72:ae:
cd:1e:8e:c1:5f:17:1b:4b:e7:f0:fc:ec:1e:dd:b1:
d7:d9:23:04:53:4a:87:0e:a4:28:70:05:cf:db:8a:
6e:05:4c:9b:87:f8:6f:ee:1c:79:ea:8a:41:24:cd:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:20:BB:B6:B9:7C:D7:4C:21:AF:BF:CB:98:7F:B9:CE:C0:B2:54
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:47:dc:b0:04:3e:8b:25:b2:0f:8d:68:65:27:52:e3:93:
a4:28:8f:59:c1:50:de:44:f4:56:41:dd:cb:a8:70:6c:fb:3d:
9a:29:4b:bb:10:e0:00:a6:dd:7c:a6:ac:03:26:79:7a:58:5f:
a4:d7:4b:ed:80:aa:52:48:29:30:fe:09:62:2f:7b:a4:c8:81:
83:ac:d9:95:c3:6d:a6:51:b6:26:d4:b6:0a:ed:63:3c:3a:f2:
5d:31:6c:99:cb:ec:3a:bf:b8:d1:f9:d9:be:31:88:e8:5c:48:
f0:ee:b8:89:1f:42:70:71:36:26:f2:f2:29:98:aa:9a:c2:0a:
00:92:6a:90:7d:44:5f:8b:02:c1:ec:33:85:2b:19:96:fe:d3:
4f:e8:40:f8:99:df:87:4f:46:63:8e:ca:ce:47:ec:95:3c:04:
23:cb:ee:03:08:04:82:f1:ff:0c:57:30:a6:21:5f:b2:e6:42:
28:82:7f:49:7d:95:48:25:64:08:6c:eb:59:f9:a1:3a:ed:85:
32:4a:e6:ca:20:0c:7c:95:b0:3f:68:cb:b1:b8:6c:e4:36:2f:
c3:8a:24:a6:0e:9c:47:b1:82:7c:b2:f4:87:f1:c5:ed:0d:60:
b3:97:39:b1:7c:5b:cc:48:d6:b7:94:0b:36:77:4c:df:ba:81:
00:dd:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:41 2025 by rpki-client