Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: 37rxn2OngpWgpSgKzj+O0OFakVshimAJpz1HEHnu7lA=
Subject key identifier: 52:67:3E:4A:DB:DC:FA:E7:8D:56:5D:5F:0C:A2:90:F7:12:6C:37:4A
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 0197B821461FF41FE7ED51B0C725FC1BC577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 1323
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: tMywE68Y/w3oLi1H88PrO9KeCS5cewyGVc98qipbMBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:46:1f:f4:1f:e7:ed:51:b0:c7:25:fc:1b:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=52673e4adbdcfae78d565d5f0ca290f7126c374a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:a0:98:c2:63:a0:d0:28:3f:5c:fe:e7:f6:
d0:02:be:f5:a2:60:1f:9a:59:88:ad:6f:4b:c6:ef:
eb:0d:22:5c:b4:a3:d0:92:e1:a3:f4:c5:b3:02:9d:
05:61:21:96:fa:62:db:e7:03:11:6d:93:1e:ea:3f:
b3:54:6e:d2:cf:4a:14:a5:31:92:32:87:6e:b2:5f:
17:60:70:79:94:94:a2:d3:83:4b:f9:60:48:58:e4:
6f:9c:f9:d1:9d:85:6f:e4:84:19:68:11:32:0a:4f:
4b:4c:1a:49:04:92:d2:28:a6:65:27:ae:86:16:6b:
9a:20:b8:ac:0f:29:d9:05:4c:d1:7f:01:82:3b:28:
40:15:d2:98:1c:d7:7c:0c:72:4d:fb:20:29:65:c4:
74:bc:7d:7d:8d:da:8e:0b:48:ec:b4:d0:d0:71:35:
cc:0b:bc:93:44:0d:21:35:df:08:07:38:12:df:80:
17:7e:c2:f4:2c:71:71:51:c5:4d:89:92:2a:b1:78:
e5:7a:ef:14:34:e4:b4:c7:f7:c3:d7:86:1c:1c:eb:
43:82:a5:5f:5c:05:29:ef:8c:98:82:c7:5c:a9:be:
d7:74:44:b6:60:88:19:1c:f2:09:4e:58:de:c2:19:
52:9c:e3:48:8c:9c:21:58:b1:87:dc:fe:a0:d5:7e:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:3E:4A:DB:DC:FA:E7:8D:56:5D:5F:0C:A2:90:F7:12:6C:37:4A
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:48:a0:da:d7:fc:87:57:fd:70:6f:86:73:2e:d3:ad:0c:48:
96:cf:62:68:34:49:21:d1:ac:9a:df:24:76:22:05:60:3e:a3:
91:c6:5d:6d:92:73:80:9c:e7:69:cb:eb:e9:87:36:48:87:73:
b4:38:2d:bc:5d:4d:68:1f:21:23:4e:0e:9b:c4:bb:1f:d2:b4:
a3:85:5c:e1:ad:fd:aa:38:fd:6c:e0:8d:87:67:d7:49:85:e8:
e9:4a:5f:86:3a:2b:4b:22:d8:64:44:3e:26:54:63:c3:3d:d3:
5e:09:d2:99:d7:6c:40:07:1c:0f:d1:b1:14:91:44:c6:e2:61:
7d:04:17:68:5f:f0:88:ab:49:ed:f9:c8:2a:4a:aa:86:e6:ef:
47:f8:fa:26:3f:b4:a1:e9:b6:a0:ff:ba:91:ca:4d:7a:9e:c7:
84:7d:63:85:eb:a6:05:fb:8c:45:d7:b4:62:c5:b5:a0:b1:77:
26:4f:c2:5d:66:82:6b:98:83:0c:7e:6e:1a:32:fb:80:c1:18:
c7:1d:62:ea:29:f3:84:f4:88:11:79:7a:ca:c4:23:85:27:5c:
87:0d:bf:cf:6b:7b:42:34:65:5d:4d:93:da:90:ec:1c:95:1b:
bc:49:82:eb:89:65:82:a7:4c:75:a0:d5:7c:00:b0:f5:5c:97:
da:42:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:52 2025 by rpki-client