Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: YTFPgLGQrvvHobiwjaOqDrQevOi06ntoS7t126b6QFg=
Subject key identifier: 5C:59:D5:D9:93:57:7B:D9:21:FD:BD:35:74:E0:B0:D0:1D:0D:A0:EC
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0197B7EAC247637EC49CA5A5EBA68465C3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 1084
Signing time: Sat 28 Jun 2025 19:01:45 +0000
Manifest this update: Sat 28 Jun 2025 19:01:45 +0000
Manifest next update: Sun 29 Jun 2025 19:01:45 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
3: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: yd47zmOBvOnmLw1wA0xKEdDxjXykxV2TZNg22KqBBjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c2:47:63:7e:c4:9c:a5:a5:eb:a6:84:65:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jun 28 19:01:45 2025 GMT
Not After : Jun 29 19:01:45 2025 GMT
Subject: CN=5c59d5d993577bd921fdbd3574e0b0d01d0da0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:dc:45:f2:98:40:53:2d:e7:2b:54:04:e9:
2d:33:f1:18:c9:4d:1e:7a:17:e6:49:bd:e7:8b:cc:
56:63:05:cb:59:44:25:28:2c:eb:41:c3:05:e0:70:
ee:ff:89:4d:a4:32:06:db:f5:f2:11:70:0c:42:b7:
4f:c2:a7:1e:93:ff:fe:c8:73:0d:4b:2b:01:35:77:
35:3a:4b:fd:59:fb:3b:69:04:73:45:ec:ca:5b:3a:
38:d9:84:49:d2:b1:88:fb:f9:9a:05:ca:0e:a7:f1:
35:83:7e:e2:b6:2e:60:be:10:c9:48:c7:e6:da:6b:
0c:fb:a0:9c:8c:1d:97:53:e1:20:a9:53:78:c8:db:
9c:bf:2c:b0:b5:84:a1:6f:a0:b5:ae:2f:2d:c1:20:
f2:32:74:80:75:f8:1b:c7:2b:ee:e7:28:d9:9b:ba:
c6:c6:77:38:e8:85:6a:03:97:d2:8e:c2:78:ad:44:
30:db:20:a1:5b:ab:5d:b4:d4:e4:4a:c7:ab:3c:5c:
e4:c8:c4:64:e2:f4:a3:69:88:9d:5c:1f:59:4c:1d:
45:61:38:7f:27:b5:1b:31:7f:9d:ea:37:f3:92:3b:
a1:d5:98:fd:b5:bd:df:4f:2a:f1:31:f1:2e:8c:69:
85:db:eb:eb:ef:4f:38:62:10:e6:91:c3:bd:7a:90:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:D5:D9:93:57:7B:D9:21:FD:BD:35:74:E0:B0:D0:1D:0D:A0:EC
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b8:bc:ea:21:c6:a3:93:e6:8b:9c:97:af:b1:8f:4a:04:6c:
95:6e:ea:5c:25:1e:50:68:71:19:83:ac:25:40:16:fd:00:26:
60:5f:35:78:65:e2:a3:ec:1a:da:d8:3d:0c:38:e9:26:84:53:
5b:bd:7e:7d:7d:c4:d0:09:49:d5:08:2e:e5:ca:eb:82:e5:98:
e3:24:f5:e4:af:7a:d9:02:82:fd:8c:20:b4:08:e7:4f:82:8d:
54:c4:09:58:6d:9e:5b:17:9a:6f:73:42:5d:5a:18:ea:78:7e:
4d:21:89:92:5c:ae:e5:e3:16:29:ed:38:60:ef:dc:66:31:48:
4c:06:b5:34:26:e9:e8:ae:0c:b9:d0:e5:a5:84:d7:3d:cf:cd:
87:03:b5:e8:4e:61:b4:22:e9:c1:9a:05:14:0c:3b:15:65:33:
74:6a:9e:17:0a:a3:bf:94:7a:d8:b2:c0:74:fc:24:55:9a:ee:
91:52:b0:e1:2f:21:09:d0:23:69:2f:b3:34:ea:02:a7:39:4e:
35:79:1e:d5:63:a8:ab:5a:b2:7f:8e:54:4d:23:47:e1:0d:3d:
75:6b:c0:cd:40:f4:d0:66:c1:0d:52:d0:a6:da:c9:49:ef:97:
48:67:2a:ba:b5:33:7f:83:65:36:52:70:f6:2d:10:c9:fe:71:
9d:61:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:43 2025 by rpki-client