Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: 8MnlXm7IcU+0Hcf1/TVnHGcZHbK9SXRTQBkfpoMjj7k=
Subject key identifier: 03:9F:EE:83:F7:0D:4C:CA:86:46:6E:18:1B:52:C1:2D:91:67:73:69
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 0197B7B34F5DA0996243650F778090A7B140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 086B
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: YPkpcBuTJ44CjjlCyNwhLRXU8mFlikoHoPS/A54nIfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4f:5d:a0:99:62:43:65:0f:77:80:90:a7:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=039fee83f70d4cca86466e181b52c12d91677369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:13:ad:c8:3b:8c:a0:19:f9:72:50:86:2f:
74:0c:4e:f5:c4:8a:d3:86:fd:5d:e6:11:a0:a5:ed:
a0:13:96:81:e2:06:7e:5f:f3:e1:25:18:df:67:98:
1a:16:ab:80:f0:40:71:c9:83:29:b5:0c:f4:78:43:
0c:53:68:19:d7:4f:df:9c:22:14:3e:db:5d:5c:36:
66:03:25:64:5b:6f:0c:23:46:0e:74:5d:ad:82:44:
db:d8:48:34:e5:47:27:93:b8:ff:7f:63:52:2b:15:
18:a8:eb:58:c2:55:e9:4f:3e:f5:88:3e:41:cc:5b:
04:1a:0b:0b:e0:b0:af:00:ee:44:26:6a:83:2e:6b:
dc:cb:41:93:4b:22:62:66:a2:47:f4:ca:47:f5:05:
6e:7a:41:a9:bc:9b:19:a4:fc:5a:7d:23:80:56:d8:
0d:03:5c:04:01:e0:fb:02:d3:6b:45:fb:0e:d7:13:
04:08:59:cf:24:cf:64:04:d8:9e:12:9c:b8:12:3b:
f6:b5:ee:54:8f:3b:11:32:df:d8:e0:9e:1f:9e:0a:
72:52:78:a0:7e:e7:63:5f:51:5f:a7:22:0b:0e:c8:
75:2b:58:ec:fe:c3:35:cf:ea:f9:c0:ff:a7:d5:72:
07:07:07:73:ee:77:af:ca:f6:87:93:3f:bd:94:83:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9F:EE:83:F7:0D:4C:CA:86:46:6E:18:1B:52:C1:2D:91:67:73:69
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:61:b6:21:0b:51:49:5d:3e:b3:9d:95:f2:45:03:84:a4:d6:
fb:e9:54:06:6f:c2:39:71:fd:0b:34:a6:7b:c5:88:8e:3a:af:
9c:cf:e3:95:81:66:f8:e1:c6:b9:22:74:6f:06:3e:83:8f:28:
7b:c4:6c:e4:75:a7:87:9a:4a:8b:f6:fd:8b:4b:89:5c:f1:44:
26:20:b2:8d:de:20:dd:77:f4:2f:ae:fe:2e:86:84:3e:b7:aa:
82:7a:af:43:d1:da:1e:81:51:3e:c0:1c:8f:90:f8:71:39:93:
c7:a6:3b:2d:6b:e8:36:c6:17:0f:2d:3e:5e:d5:98:bd:70:d2:
e0:78:b6:da:d6:1f:4e:fa:52:93:98:33:44:c2:26:de:d8:9e:
30:98:d5:1f:c1:b4:a6:04:09:fd:08:d0:d4:9b:3a:b3:93:d1:
97:a0:92:87:7b:5b:6b:de:a0:fb:0d:7d:20:71:8e:c8:0f:15:
00:d6:dd:ee:5a:61:7d:5b:45:8d:b2:ad:04:75:74:8f:e5:17:
57:aa:50:70:32:77:38:26:4b:18:d8:95:00:d4:1d:84:d5:25:
f0:8c:73:2d:13:83:4d:89:21:b8:62:0d:da:b2:7f:cc:de:81:
db:b4:05:73:42:c4:dd:44:a8:14:d1:f9:b9:c5:03:62:f4:a0:
ad:a4:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:05 2025 by rpki-client