Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: q9qHA/4PTSIP7WdlADFzE40ZjjHrJF9SWjp5HpCGcuI=
Subject key identifier: 36:6E:96:51:04:C2:0B:49:5B:89:89:CE:86:FD:8A:D2:56:13:53:98
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 0197B6A1B76D7D0E09B8B1489D47BEF94441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: G5/6WV116I9TMbvdsASIB7xck1Xa1DD1TcRP9le8BqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b7:6d:7d:0e:09:b8:b1:48:9d:47:be:f9:44:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=366e965104c20b495b8989ce86fd8ad256135398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:e3:45:12:8a:ca:39:5b:35:17:31:21:dd:
7c:37:58:a2:c5:4e:e1:d3:43:f0:cd:4f:96:c7:f3:
11:a0:3d:ee:79:e4:93:d7:b8:5a:f7:15:46:0b:66:
be:a7:74:cd:8e:7c:46:45:7f:36:e9:d0:a1:86:6e:
44:53:4c:7a:97:0b:01:94:1f:02:8c:8f:ea:7f:e4:
81:4a:6f:ac:9f:8c:3c:c7:26:c8:79:de:b1:18:4e:
d1:b1:78:d3:05:25:b0:ef:26:15:e5:c1:e1:e8:5d:
a9:b3:64:30:b9:8b:e8:8a:af:af:a0:89:e8:ed:67:
f1:50:42:65:23:04:2d:a0:9b:96:21:07:6a:6d:ab:
95:9b:93:44:3b:39:27:03:f5:69:25:50:b3:55:a4:
34:65:44:4f:89:0d:62:fa:7a:cd:f0:74:c5:8e:06:
a1:89:51:2c:ee:06:ea:4d:04:f4:90:78:66:92:31:
ad:af:16:bd:50:e5:5f:ae:47:97:25:82:af:04:d7:
99:09:2d:72:b4:da:26:2a:98:c3:e4:93:f1:42:fb:
4f:b7:23:4f:f2:af:1a:28:53:57:c2:10:93:b4:73:
37:9a:2e:23:3c:94:0b:48:8b:0c:35:1c:35:9f:f2:
73:0f:47:ad:8b:2e:92:e1:58:8e:a8:08:3c:1d:ec:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:96:51:04:C2:0B:49:5B:89:89:CE:86:FD:8A:D2:56:13:53:98
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cf:a9:a9:05:04:e2:fe:eb:9d:0e:59:10:36:0a:cf:64:b7:
12:79:2e:27:b5:14:c5:c6:df:9d:35:fe:48:5a:26:97:49:6d:
3e:e2:20:0f:31:fd:eb:0b:eb:d5:c7:2a:b2:b9:00:d4:7a:2c:
fc:42:48:7f:fb:bf:ca:75:e7:51:78:f3:a1:76:2d:2f:c8:16:
a4:47:b6:49:9d:d5:62:59:02:f2:fc:8c:2a:5a:12:2f:95:38:
b3:1b:f4:d1:be:51:af:05:cb:9d:20:86:78:74:73:6e:95:e7:
4d:40:84:5f:b1:ee:cf:1d:02:70:35:bb:b4:96:cc:d6:16:bf:
8d:b0:3a:47:d4:da:81:d7:6a:6e:9b:af:fc:3e:95:3d:a7:23:
91:6c:51:73:85:44:0b:ad:9b:0d:8b:97:44:80:01:dd:70:46:
1a:61:d3:6e:6b:cd:14:8f:87:45:83:26:4e:dd:42:25:6e:15:
11:d0:53:e0:c7:37:3a:1b:82:61:0c:20:cc:cb:f9:6a:b6:b3:
a4:02:90:ed:d3:f8:04:27:7b:79:5e:3e:4c:cd:ca:49:7b:5d:
f2:70:ba:e5:03:47:f1:25:6a:e2:c5:f8:ce:48:0b:23:00:48:
2b:12:3b:61:0a:d9:8d:7a:df:c2:ea:9e:9d:65:31:e3:2b:28:
ae:8e:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:52 2025 by rpki-client