Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier: pnAuHiJF+k0i5tsPKcGmdXFTwnqleZA9Drh1JJ1+TA4=
Subject key identifier: 27:51:2A:22:7E:00:C3:7C:37:C9:84:F0:A8:14:BA:7A:31:4B:3F:AB
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 0197C4C9CF6194476794F59B97F1660569BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 07:00:49 +0000
Manifest this update: Tue 01 Jul 2025 07:00:49 +0000
Manifest next update: Wed 02 Jul 2025 07:00:49 +0000
Files and hashes: 1: RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa (hash: x++OoIBpOVlhu2bDSyq/BzG7LV3g3RGN/EJ/KyFGWbM=)
2: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=)
3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=)
4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=)
5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: 4aWsS4eEAgSN9+/NUyU5JmerMjZI4mmF4cnmo6U/28c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:cf:61:94:47:67:94:f5:9b:97:f1:66:05:69:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jul 1 07:00:49 2025 GMT
Not After : Jul 2 07:00:49 2025 GMT
Subject: CN=27512a227e00c37c37c984f0a814ba7a314b3fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:b3:c7:29:73:30:07:f5:12:eb:53:7e:40:
59:5b:be:e1:01:2c:ae:17:a1:b9:30:07:bc:4b:81:
32:e6:a6:40:7b:2d:42:2b:fb:49:e1:1b:2f:df:5c:
f5:bf:bf:cb:57:78:c3:15:28:e8:b9:f3:c5:74:48:
70:6f:cd:90:fd:18:02:8a:08:87:63:fd:ab:4a:40:
37:6a:67:06:85:f3:2c:6c:b9:c1:74:f0:2b:6f:46:
4f:6f:eb:0d:13:a9:67:a4:3f:bf:6d:88:32:e0:5a:
44:00:55:24:52:5c:d4:6c:ef:76:10:95:32:21:2c:
00:3c:4d:5f:ac:b4:59:05:ff:a8:d6:50:c2:9f:08:
7a:e9:69:34:d2:a6:e3:d2:dc:5b:72:21:40:59:37:
fa:9b:a3:a8:58:68:b2:06:29:05:91:4c:ee:42:78:
d9:7f:5c:0b:eb:ce:0d:97:30:b8:0b:18:72:cc:95:
df:20:fe:97:ff:94:fc:04:21:d1:d2:6c:72:31:86:
cd:26:9a:ce:44:7f:e3:1a:10:4e:41:03:f2:f5:b5:
d2:5b:96:17:69:77:a1:5d:4d:c7:b6:1b:a1:e0:82:
96:7f:29:ce:02:a0:6a:c9:b1:00:f1:92:41:e0:1c:
9d:6e:4d:1c:27:fc:c4:05:fb:8e:82:bc:77:0a:10:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:2A:22:7E:00:C3:7C:37:C9:84:F0:A8:14:BA:7A:31:4B:3F:AB
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:cc:ab:f1:1b:74:b2:88:5f:ab:cf:84:18:da:b0:b7:14:
7c:90:35:f7:22:cf:1b:74:82:d9:cb:63:83:0c:b1:f2:0c:f1:
62:51:a7:ff:16:fb:0d:10:c8:c6:08:1e:ab:8a:3b:71:a1:9c:
ae:c3:76:cc:bd:62:ed:63:1e:c9:bf:b8:0f:d4:c8:87:a3:40:
d9:8d:4c:52:77:ff:21:76:36:fd:4f:a6:1c:67:1e:2a:c5:1b:
8b:7b:27:99:90:41:a1:07:a6:7a:17:b1:16:52:05:f7:79:b5:
75:56:ff:79:31:3f:17:2c:ed:12:19:d8:5c:89:b3:8f:4c:41:
ce:d9:e0:52:9b:29:6c:bc:b8:bf:6b:ce:d0:0f:1f:26:41:7d:
40:0a:7d:7a:41:36:a9:ae:ef:aa:87:2c:69:ac:91:62:73:eb:
6b:b9:6b:35:75:d0:af:fe:2b:6b:d0:ba:3d:88:7f:77:48:06:
72:9b:1c:e0:74:2a:16:bb:74:af:81:7a:b4:d0:39:92:a2:1c:
1e:41:92:c2:ca:2d:9d:45:cd:ac:c3:dc:b4:22:ba:ff:60:35:
a8:20:91:3c:2f:f1:de:f0:9f:17:4b:76:da:d1:18:67:09:83:
74:4e:fc:7a:ea:64:23:33:da:cf:7b:6c:35:f8:c9:0f:12:ef:
7d:1f:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:23 2025 by rpki-client