Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: IbkqDYHBl7rZFa0q4VT68umTFaNH4MSkPfHvOQyKJaY=
Subject key identifier: 9C:D2:6F:C7:EF:47:AF:FD:77:44:49:64:41:2D:6A:BE:D9:64:34:FD
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 0197B9D881A89B7E698EF5F5347E1600FFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 02E3
Signing time: Sun 29 Jun 2025 04:01:03 +0000
Manifest this update: Sun 29 Jun 2025 04:01:03 +0000
Manifest next update: Mon 30 Jun 2025 04:01:03 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: XvnvW6eByjlOFdPDFGf7h6pmpaVJlq59scuEb9LXoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:81:a8:9b:7e:69:8e:f5:f5:34:7e:16:00:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Jun 29 04:01:03 2025 GMT
Not After : Jun 30 04:01:03 2025 GMT
Subject: CN=9cd26fc7ef47affd77444964412d6abed96434fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:a5:2b:5b:11:e7:06:00:c7:64:56:e9:86:
23:3b:7e:8d:ae:f6:76:3b:f0:5d:dd:db:a7:74:f6:
da:90:b8:e0:69:e3:7e:10:67:54:fc:76:a9:fd:f0:
44:c4:1b:3e:43:83:02:a0:59:be:23:20:d3:28:3d:
5e:80:19:e3:cf:1d:ad:a4:45:c1:d1:18:78:88:e4:
5f:0a:08:cf:a8:77:3b:de:38:63:02:24:e2:b1:04:
17:fb:a5:bb:a2:d2:65:ee:7a:b9:82:e7:d7:16:cb:
a3:18:a2:f5:13:39:74:7d:3c:aa:2a:0d:33:e2:de:
f8:f3:e9:5e:02:da:34:1e:b7:c6:ef:23:a7:43:d0:
9c:96:ad:4e:a5:62:eb:76:23:a0:a1:ec:0e:18:26:
99:72:f9:dd:64:1d:7c:36:73:8a:33:a4:61:65:9e:
b0:a5:90:2f:09:72:3a:de:96:b3:54:48:1f:17:ca:
8d:52:3f:c1:20:38:d5:68:22:fe:7c:8d:f5:a8:c4:
6b:b1:8d:dd:f7:0a:bc:74:21:d8:23:da:c0:8e:1f:
c0:c0:82:07:07:3a:03:3c:22:9b:27:46:3b:25:52:
64:d1:10:3f:26:d2:b1:f6:2d:d7:81:8a:8a:41:85:
a4:e6:b9:a3:f8:b0:bf:15:52:24:bf:a4:84:50:74:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:6F:C7:EF:47:AF:FD:77:44:49:64:41:2D:6A:BE:D9:64:34:FD
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:08:28:27:46:fb:12:bf:49:d8:c2:6c:f9:d8:c8:f6:b8:df:
1a:40:ab:3c:7b:c9:1d:60:66:0a:05:23:a9:2e:01:e6:e9:3a:
78:b7:41:5a:ee:c0:cd:45:c9:f0:b1:67:26:fa:e9:44:6c:1b:
4e:38:35:74:18:35:76:2c:42:24:c2:b2:35:03:fc:b9:b7:51:
dd:ee:91:95:e2:f5:53:e9:23:8a:75:ed:4f:a9:f4:a9:f8:5d:
ad:10:a0:95:b7:68:e7:41:57:19:ba:08:6c:27:11:52:72:cc:
9b:eb:05:b9:36:72:c1:db:22:be:34:82:45:eb:de:9c:15:72:
93:3d:79:a3:fb:dd:fc:21:d9:c5:5a:cb:00:ed:09:7c:db:b8:
3c:8f:ed:3f:f1:3a:7b:b0:7b:51:3f:27:24:70:2c:4b:65:8b:
f7:ce:26:b8:50:ca:a2:ac:c7:ff:ec:38:23:e5:5c:96:36:dc:
2f:ca:8f:6b:24:b5:9d:64:cc:e1:d7:4e:27:b0:67:02:c5:5e:
7e:63:81:f8:bf:bb:83:cf:7c:46:2f:08:83:da:8e:ef:f0:8e:
5f:b6:29:b5:89:21:90:de:cb:ad:04:49:b9:2b:73:f7:5c:cb:
99:97:d3:b7:d1:2b:7c:36:37:2b:95:4d:3e:ea:5a:78:1b:9c:
f2:59:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:32 2025 by rpki-client