Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: euib55aDmqOPXtER59rZLYjon4SM4GF30ao+cuE1eso=
Subject key identifier: 05:9D:09:93:D9:9C:05:E4:52:3A:24:6B:4C:9C:B7:65:F0:F3:3B:44
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0197B7B304E45B1F2E64B2FD70AAD16AB980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 08EA
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: /o99TEfoJJTPN/IQZy4eX7IjmW0Q7yX/sz8oLruLDNE=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:04:e4:5b:1f:2e:64:b2:fd:70:aa:d1:6a:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=059d0993d99c05e4523a246b4c9cb765f0f33b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:5e:26:b1:7a:57:45:29:f0:e1:2f:60:13:
1a:05:32:d5:a6:79:eb:91:9a:9a:86:ed:1e:31:9b:
32:7c:a4:c5:bf:08:51:d4:bb:13:6e:ec:d5:24:98:
54:dd:d9:9e:20:6e:34:45:80:c9:6a:c4:2e:69:00:
76:e8:08:4f:51:a3:20:3e:7a:65:53:ee:fb:0a:f3:
d8:3b:ab:67:ac:fa:c0:f5:b4:72:28:04:a7:5f:4b:
ba:10:af:e4:9c:81:c5:e5:c1:1c:52:28:3b:8f:1d:
88:94:66:fb:c4:0a:af:bc:a5:a2:ec:02:d0:98:e1:
2f:07:86:81:1e:6d:95:f3:e3:bc:b4:c8:0f:19:8c:
84:41:85:a6:19:31:b0:7a:80:96:4c:62:2d:49:9e:
a9:3b:ea:75:9f:79:fb:d7:dd:c9:f8:cd:32:35:a7:
e2:55:60:7c:e4:8d:57:5f:2a:62:59:3a:d5:10:cc:
23:e2:81:4f:af:8b:cb:f9:d9:4d:79:d1:54:56:d7:
c4:e8:de:b2:a9:8d:e9:4b:84:be:2e:73:3d:b8:8c:
10:1b:7d:1d:37:a2:2d:c5:fe:6d:fa:c7:a9:b2:94:
62:eb:d1:93:e7:1f:ed:4e:69:ef:61:7a:ff:f7:e5:
ed:68:00:9b:3d:e2:2b:98:bf:3c:a2:d6:61:74:65:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:09:93:D9:9C:05:E4:52:3A:24:6B:4C:9C:B7:65:F0:F3:3B:44
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:bd:52:e0:3e:be:02:8c:94:2b:23:66:7c:c3:43:51:2a:
71:ae:89:ed:0a:0a:52:7e:d9:58:5c:8c:98:5b:99:5a:4f:77:
0d:79:9f:34:6b:82:6f:34:a2:56:7a:a7:52:49:09:b9:fc:1f:
17:76:b9:b6:76:65:3b:b9:43:f8:f0:7f:24:57:53:9c:0d:64:
7f:e1:66:c0:60:7d:5e:1d:1b:37:71:08:e8:4e:6e:ab:34:ad:
37:40:8a:ac:63:19:cf:20:91:39:2c:36:e8:f3:fd:d5:cd:c9:
fb:da:50:6d:a6:c5:48:e1:63:66:ea:6c:75:0f:5e:c3:52:2a:
1e:47:fe:23:24:76:e3:7a:cd:58:7d:9d:58:6d:04:d9:f1:71:
a0:97:dc:89:ce:46:7d:fb:80:c7:78:22:91:ed:14:63:d6:0c:
74:0b:8c:06:8a:e7:76:3b:80:e2:74:14:b9:b3:e7:c0:04:ff:
52:f4:64:1a:cc:9b:88:2e:fd:02:92:dc:78:c7:00:67:75:03:
b9:3d:03:29:97:d0:1a:29:04:fb:09:82:a1:39:01:b1:96:e2:
48:4f:96:d2:72:05:05:43:40:82:14:91:48:e5:c6:ec:f8:bf:
85:6b:d8:f3:a7:27:d0:0a:ed:4c:a4:28:4a:d5:eb:3d:87:8a:
82:f4:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:22 2025 by rpki-client