Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: 4UP5eWJLP/vHgrTgWbkVX1hv4KZas/cw1hqIMg7giec=
Subject key identifier: 6B:CE:36:C4:6E:A3:D4:D4:ED:08:60:79:58:7A:F1:05:99:38:6B:8D
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 01976BBD09F7CBCC32BFC0E657680F274AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 14E0
Signing time: Sat 14 Jun 2025 00:00:40 +0000
Manifest this update: Sat 14 Jun 2025 00:00:40 +0000
Manifest next update: Sun 15 Jun 2025 00:00:40 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: uQ8otgDlnggDZOeW6UCoOBksDDzZ4/oVXK0714LUL8s=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:09:f7:cb:cc:32:bf:c0:e6:57:68:0f:27:4a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Jun 14 00:00:40 2025 GMT
Not After : Jun 15 00:00:40 2025 GMT
Subject: CN=6bce36c46ea3d4d4ed086079587af10599386b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:79:19:e7:d6:63:d5:a3:86:35:f5:8c:85:
0e:ba:3f:02:3e:d4:1e:25:5d:ab:84:fe:c0:66:c6:
3a:e0:c3:25:fd:02:54:f5:ba:4c:21:05:63:68:11:
93:08:0a:5d:41:3d:3b:f4:62:6b:a1:8a:52:44:33:
be:27:06:f7:45:42:5f:5c:55:9f:5c:7c:ac:28:41:
ab:20:e5:10:6e:2f:1a:14:fe:66:47:2a:c0:0f:83:
79:93:29:15:ae:7a:ec:fa:93:0f:b3:fe:3d:cb:87:
12:4c:02:b3:87:36:06:65:6e:eb:98:b2:af:e7:c9:
3c:2a:0b:da:66:88:ad:a3:72:3a:7c:26:69:8f:f0:
e9:b8:ed:9d:0d:c8:8d:b1:e3:38:4f:77:42:43:ba:
9e:f5:5e:ef:be:e4:1b:f9:6d:ee:13:f4:87:d7:47:
d5:42:49:51:ce:08:c3:1d:eb:4b:06:13:ce:2a:a1:
7f:18:8f:90:0b:4f:2c:0e:82:1e:74:17:44:40:33:
b6:ac:5d:0b:60:7d:96:cd:b9:97:da:56:ee:94:a6:
6f:c6:10:88:9b:2d:77:8e:f2:a1:6d:14:c5:24:f1:
2e:7b:6e:cd:f0:36:af:3e:cd:cd:bb:48:7d:9e:d5:
14:7d:26:f8:16:ec:90:11:8a:c2:83:9d:bb:f5:e4:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:36:C4:6E:A3:D4:D4:ED:08:60:79:58:7A:F1:05:99:38:6B:8D
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:39:11:38:67:92:fd:d1:88:1d:c5:04:58:c3:1b:2c:62:63:
1b:b0:80:ed:62:64:be:df:d5:34:ff:ab:19:8d:12:f0:17:95:
59:dc:34:5b:12:b2:52:e5:49:3c:06:e2:a7:7d:de:53:89:ae:
37:9f:b7:7b:2c:65:20:a1:47:17:19:97:13:52:5a:7c:8e:fe:
10:34:33:c7:71:90:b7:17:07:a0:3e:12:d5:a6:2b:e9:66:b2:
4f:89:79:57:a1:38:93:cb:46:a9:f3:04:1d:40:e3:28:66:bb:
c9:dd:7e:13:38:88:4d:5b:e9:ca:6b:54:40:83:c7:9c:9a:30:
c1:d4:26:99:61:2a:dd:12:78:00:46:96:0a:56:67:62:e1:01:
a9:67:06:17:df:3d:60:ea:4b:91:44:52:98:29:cf:f4:ef:af:
c1:39:a2:92:55:db:a4:50:8c:80:89:a6:c7:96:00:cd:d2:77:
4c:22:90:8e:f3:f1:a5:29:fc:87:bb:fc:52:a8:84:fc:8a:5b:
71:51:21:fb:62:78:4b:0b:26:22:3c:38:d7:5a:0e:f4:16:f4:
2a:30:a2:15:1c:43:ce:24:72:5c:ba:67:ab:57:f0:2e:e8:d8:
be:54:25:a9:00:4c:63:a1:c7:62:bc:f2:c0:8e:aa:bc:b0:28:
35:93:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:07 2025 by rpki-client