Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: XvkIXmME+iKUCDjfMPtWQ1xdv3h9132QH7OZThh6QQw=
Subject key identifier: 03:F2:F2:7B:0B:CA:73:A1:C9:5A:A1:91:26:AC:B0:7B:1D:53:DC:C9
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 0197B88EE6E72B78DEA6F386FC612EEF5C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 0872
Signing time: Sat 28 Jun 2025 22:01:02 +0000
Manifest this update: Sat 28 Jun 2025 22:01:02 +0000
Manifest next update: Sun 29 Jun 2025 22:01:02 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: BAIKzPrRDR0NARjc097iektBEtVrNDGA9dTumkshd1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e6:e7:2b:78:de:a6:f3:86:fc:61:2e:ef:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Jun 28 22:01:02 2025 GMT
Not After : Jun 29 22:01:02 2025 GMT
Subject: CN=03f2f27b0bca73a1c95aa19126acb07b1d53dcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:2a:db:5d:12:28:33:ea:28:3e:90:30:f0:
7f:b1:6e:6e:8f:01:c9:9c:70:03:65:7d:47:44:79:
68:55:41:c0:51:d2:2b:8a:43:d7:98:15:48:a0:55:
ab:38:4c:ba:48:37:5c:ff:7e:34:df:a1:c7:7e:4c:
f3:39:f8:59:82:f4:4b:36:18:4b:23:47:66:52:0c:
c5:d8:27:2f:ef:69:75:19:bd:68:a4:c0:03:aa:81:
22:34:bd:af:ac:bb:fd:80:f3:ef:ab:b1:4f:bd:98:
e9:38:fb:70:d3:d9:a0:76:67:69:ab:56:41:4c:87:
da:46:32:e8:0c:87:0d:a6:57:39:22:ec:50:eb:be:
60:b1:3d:74:b9:22:e3:e8:60:b2:e9:32:80:8b:a0:
53:cc:af:bb:0f:d2:b3:48:90:17:5f:dd:91:36:d7:
a3:55:52:94:31:ea:7a:22:7d:57:94:3e:79:59:75:
8b:e1:94:bd:03:32:54:7b:c4:9c:36:34:bb:ce:d5:
73:88:19:38:e9:aa:72:ce:f4:a1:38:e4:04:5c:8c:
e4:9c:dc:48:d4:10:5a:0f:b7:ca:1e:8b:83:73:a0:
3b:bb:71:85:b8:16:be:22:0d:4f:ec:45:e7:34:21:
07:1f:b0:1c:41:ca:d7:b8:fa:17:c5:95:66:34:d6:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:F2:7B:0B:CA:73:A1:C9:5A:A1:91:26:AC:B0:7B:1D:53:DC:C9
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:22:3e:d4:07:4e:a1:c2:60:50:a0:21:94:76:75:7a:5b:
f0:57:34:f3:36:5b:29:de:b0:ca:3b:a6:66:5f:dd:c0:d1:ce:
3b:c0:1d:5f:7e:83:05:51:96:e9:cb:fe:6c:33:4a:e5:59:67:
f5:0d:f3:90:0f:ab:27:fa:ba:15:04:64:8c:3b:27:05:d7:19:
40:94:fa:99:5f:38:17:e0:57:a2:a5:10:9f:ce:b4:5e:90:2f:
73:c6:a2:98:9c:d4:d3:7d:8f:be:d6:95:c0:5a:32:3a:6d:54:
95:c9:d0:cd:e6:f3:62:be:7c:75:c4:ed:3d:14:25:7c:9f:cb:
06:bc:33:f8:c1:85:d0:5d:ec:57:3b:15:50:07:ab:3c:00:36:
ee:74:26:c0:79:68:00:ca:5b:d5:58:6a:98:dc:91:ac:42:a0:
62:9f:df:aa:64:2f:85:73:6d:2c:b5:f0:b9:86:3e:72:19:d6:
bf:a2:a5:01:1e:4c:34:10:5b:6d:08:68:b2:86:5a:e7:76:74:
b2:13:d7:96:d6:d6:27:dd:2b:90:5b:da:c9:76:1b:a4:ae:57:
66:5c:cd:1c:0c:53:6f:ed:c3:d3:f9:ff:ff:da:09:26:54:85:
60:9a:7d:1a:e0:13:91:a5:88:02:68:5c:f6:b0:92:a3:cc:c5:
50:96:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client