Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: ESIF4kUoZC7FZMXZmqxZTqpjuMi573CqJVugkRp+H5Q=
Subject key identifier: 0F:BA:D5:B7:3A:F8:33:AF:CF:B4:E6:ED:F0:78:40:5E:AF:07:2C:D5
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 0197868F804BF88A3D33E82D7821CB1360F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0932
Signing time: Thu 19 Jun 2025 05:00:40 +0000
Manifest this update: Thu 19 Jun 2025 05:00:40 +0000
Manifest next update: Fri 20 Jun 2025 05:00:40 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: qCQT3kBKcOhUFNxAGf2QqV8TwqvkDijceCHnPrU5f8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:80:4b:f8:8a:3d:33:e8:2d:78:21:cb:13:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Jun 19 05:00:40 2025 GMT
Not After : Jun 20 05:00:40 2025 GMT
Subject: CN=0fbad5b73af833afcfb4e6edf078405eaf072cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:f1:f9:6f:bd:d0:21:2f:48:c3:2b:9c:d3:
99:c4:c5:4a:38:af:e1:6f:88:17:d0:41:e8:fe:19:
24:7e:c5:6b:d1:c7:8a:d9:77:75:33:ff:9c:7c:d5:
86:d4:9b:1d:50:fe:e4:33:15:b4:ca:cd:8d:2c:63:
0d:be:9f:ba:69:13:cf:1a:22:4f:8c:15:08:32:2c:
22:e0:81:23:e3:51:88:35:d7:eb:72:10:70:f7:f8:
05:4f:17:a3:54:2b:fa:72:36:24:76:1b:f3:88:7d:
8b:67:7a:2c:11:71:4d:0c:73:b2:a2:cf:de:44:bb:
7e:3d:b5:6a:d5:e0:a5:f0:43:18:9c:9e:f5:50:1c:
5c:1e:74:19:2c:5c:53:22:2a:9d:3f:27:8b:7f:c5:
c9:fd:f6:ce:3d:11:22:61:91:e8:41:d3:39:75:00:
1f:ef:2b:9a:1f:57:34:b3:35:5e:32:49:f4:56:58:
dd:7c:d9:6c:f0:ce:00:74:93:63:a1:c7:40:55:bd:
d9:9f:9b:72:45:e4:81:df:8c:07:11:b0:17:9a:45:
a1:cf:b9:7a:c5:3b:70:50:a4:ee:ac:86:f6:c4:fc:
c8:0c:11:90:76:6b:23:a5:63:2d:61:17:10:df:f1:
69:92:e1:d5:8d:46:53:71:b7:3c:e3:07:1e:c3:6e:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:D5:B7:3A:F8:33:AF:CF:B4:E6:ED:F0:78:40:5E:AF:07:2C:D5
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:f2:40:ec:8b:d3:b2:08:0f:7d:a1:79:9f:28:56:44:69:
9b:87:fe:32:0a:98:07:e1:ec:0c:5e:7f:e3:34:46:b3:f9:a1:
f7:75:87:3c:bb:b8:95:10:7a:c7:27:0c:3d:b4:21:79:a5:40:
79:37:69:e5:0d:b3:1e:92:63:53:02:2c:48:56:53:e3:e1:df:
eb:c2:5f:91:f1:39:e4:9f:28:16:46:ee:b7:b0:b2:5e:57:c1:
97:12:a6:3b:0c:01:c9:fa:93:e1:24:36:12:17:cb:ff:a8:91:
ac:86:26:80:b2:5b:5d:76:2e:ba:ef:d8:3e:b2:69:ef:70:f5:
d9:c4:26:0f:f4:29:4a:89:e3:3f:d3:43:99:ec:d0:09:75:8b:
25:be:b1:b8:af:57:3a:9f:af:cf:1e:71:79:fa:40:76:e3:22:
d5:06:89:20:fb:0a:f5:8c:d3:50:01:e2:69:e0:38:f7:7f:42:
6d:27:fe:10:81:1a:ff:32:3e:57:e0:b1:f7:ca:34:ba:31:20:
fd:33:eb:9d:1b:f4:4c:da:8d:50:d0:85:7c:28:49:06:63:36:
33:05:4b:14:83:6f:fb:ac:75:da:7c:d1:c0:68:0d:ac:d5:62:
1d:e5:26:ff:fb:98:49:5f:ea:8a:4f:b9:50:55:e3:bb:f3:eb:
fb:bd:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:24:57 2025 by rpki-client