Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: DnTCdU0nSk8Q9DMfLZ/eo4znKAib0tl94YGa0cWKiB4=
Subject key identifier: 52:A1:02:B0:B9:60:04:87:53:84:96:C1:AD:DE:6D:C0:43:9A:4B:ED
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 0197684E4961822347D6E9FB91C7347B9FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 151F
Signing time: Fri 13 Jun 2025 08:00:50 +0000
Manifest this update: Fri 13 Jun 2025 08:00:50 +0000
Manifest next update: Sat 14 Jun 2025 08:00:50 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: BuIuxl5YHIjiXizUpiNYJ/lcIJEoYzzqbeskJfzuxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:49:61:82:23:47:d6:e9:fb:91:c7:34:7b:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Jun 13 08:00:50 2025 GMT
Not After : Jun 14 08:00:50 2025 GMT
Subject: CN=52a102b0b9600487538496c1adde6dc0439a4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:29:2d:03:ea:81:d6:1a:54:a9:ec:4c:48:
26:d3:59:14:2d:c3:e9:81:a6:22:93:96:2b:3d:19:
ef:7e:5c:0e:b9:bb:ae:0b:c9:ec:cb:8c:e0:62:d3:
ab:34:c8:6d:8c:c7:ca:75:b6:0e:c7:b4:4c:d1:c6:
e2:91:58:22:0f:f7:39:fc:ac:4d:26:98:44:4a:ef:
55:d4:fd:85:57:b8:70:55:3a:ad:2e:1f:6f:75:21:
8f:50:82:34:ad:3f:4c:ea:05:0b:73:f2:9b:1c:4a:
01:6b:e4:74:2f:85:c4:f1:cf:68:cd:be:c6:f5:67:
a4:9f:b7:9b:1c:01:5d:19:96:3c:72:01:a0:4b:e7:
60:7b:2e:ac:57:b7:12:6a:cf:68:dd:83:33:75:be:
9f:45:1f:57:27:91:28:d7:3f:dc:55:a5:88:2f:30:
3d:f5:08:42:5d:3d:ff:1d:18:e0:cc:eb:d7:2f:e2:
d6:08:12:63:84:a0:f8:d2:40:ee:c9:72:49:3e:b5:
2c:c7:82:d0:32:83:74:97:91:b8:5c:16:ec:3a:6c:
ab:d5:a9:11:e8:c5:4c:c2:f5:13:fa:77:ff:d5:bc:
4a:de:9e:c6:2c:68:33:7b:f5:30:b1:b4:d8:86:83:
f1:42:75:ef:34:bf:b7:37:d0:1a:b5:96:4f:c9:43:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:02:B0:B9:60:04:87:53:84:96:C1:AD:DE:6D:C0:43:9A:4B:ED
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:08:2a:ce:4b:73:9f:14:4e:53:8b:fb:8c:21:b5:dc:6f:84:
34:54:d1:6a:7b:fb:be:17:7b:b1:19:4c:76:43:69:bc:60:69:
ad:01:a9:9e:6b:2c:2c:cc:69:ba:65:a2:37:2e:71:8c:04:ca:
a6:f7:14:41:9a:7f:2d:60:f4:da:49:6b:58:26:0e:c0:36:d2:
c8:53:d7:47:e5:de:68:5b:0a:66:fb:02:6c:31:10:a2:92:19:
bb:ed:6c:50:ad:09:9a:17:8f:4b:ad:d5:e1:63:ac:65:e5:7f:
b0:a6:69:08:da:25:d0:31:4a:37:bc:ea:3e:6c:5a:a3:04:74:
6e:96:9e:27:9b:9d:c0:ae:9d:2b:51:5a:9a:a4:e7:3c:b0:e8:
d2:ea:65:38:c1:aa:5e:9f:1d:98:cb:7b:c0:0d:ff:09:7b:bf:
b0:46:79:a0:1d:40:0b:3b:ea:4f:a2:0b:97:5a:f0:64:94:26:
ef:bf:95:fc:3a:9b:d8:ec:0e:19:83:3c:c7:80:82:33:66:76:
df:cd:91:33:64:88:b9:7f:90:de:b6:a7:04:5d:bb:6c:0e:a1:
03:33:a3:a2:d2:d5:ba:55:cc:d0:2f:45:32:c3:ef:5a:8c:5e:
47:2a:d0:e1:a1:36:29:d6:f8:dc:1a:fd:d3:ab:30:e6:a9:b6:
cc:bf:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:49 2025 by rpki-client