Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: EY/e3cgDhONle2pqwRlDCbou9MFvp423w8W+2ToaeU8=
Subject key identifier: B9:15:44:36:C5:C2:0E:22:CA:0A:89:56:67:9D:14:D1:C4:41:60:85
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0197B70EF6658A009809AB63E4C9A670E733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 0432
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: MRQkCG3pLtvl6cqcn/Qe6AGlrhQY4jay95gYVHHrrtk=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f6:65:8a:00:98:09:ab:63:e4:c9:a6:70:e7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=b9154436c5c20e22ca0a8956679d14d1c4416085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:41:d8:25:2a:4c:31:f2:44:08:8b:53:52:
f1:d0:21:a7:93:75:22:9d:92:99:44:77:d7:71:ac:
b8:bb:b0:f8:f2:df:e2:59:39:f4:3a:a8:48:f8:49:
be:f9:d0:1a:50:ff:5e:30:f2:40:d6:1c:38:7a:50:
57:ff:7a:1d:49:e3:ae:3b:82:12:13:a0:33:45:96:
14:1a:6a:10:3a:bd:8d:56:7a:3e:09:8b:88:49:1e:
b4:9a:e5:51:ad:1b:e7:3a:9e:bd:0d:46:76:1e:5b:
61:0a:2f:1d:44:43:d5:02:08:de:64:ba:25:d3:90:
66:c5:bf:4a:e7:8e:31:b6:10:d9:27:4e:14:3b:ff:
ed:17:96:97:c6:ed:bc:04:1f:c3:eb:2b:df:9e:00:
31:d3:1f:2b:66:87:10:ca:55:df:65:6f:b2:5d:a1:
81:29:95:9f:46:3d:49:89:18:cb:3d:50:8e:b9:1e:
6a:4a:70:80:2d:4a:67:35:fc:57:c8:c1:61:2a:66:
da:02:97:16:52:2f:2f:17:83:1a:f5:65:97:ae:ce:
69:dd:6b:90:f7:5e:94:1c:70:22:d9:03:0a:42:03:
9a:af:e5:bc:2c:96:6c:50:fb:4e:23:e9:14:65:01:
3d:9d:42:e2:5f:0a:a6:40:15:04:5f:28:80:dc:b4:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:44:36:C5:C2:0E:22:CA:0A:89:56:67:9D:14:D1:C4:41:60:85
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:1b:e1:df:08:d5:55:12:59:88:4b:3e:e5:6d:69:ee:c4:
dd:f5:fd:86:cb:73:83:bc:f7:6c:2c:e2:96:aa:33:1d:63:e6:
21:45:eb:fa:3b:cb:a1:a4:07:2f:85:21:2a:8c:d1:61:4d:fb:
0d:3a:c6:a1:c3:ca:a8:0a:33:87:96:f5:65:9b:a1:e9:53:3b:
8e:d1:4d:21:5a:4a:05:48:ff:ba:a9:d4:a6:11:74:53:d4:96:
5a:0a:89:a1:c8:49:bc:5c:be:71:e7:c8:b1:73:c1:92:ff:7e:
ff:0b:45:70:dc:9a:27:44:81:98:ac:05:74:c4:45:9f:29:13:
c7:43:a4:37:59:51:75:34:34:a8:1b:da:e9:1e:99:a4:35:11:
79:1b:1e:be:25:8e:3b:4e:d1:4f:5c:8a:02:2d:b7:99:cc:9d:
08:99:fe:bc:63:6e:49:eb:67:31:e7:36:3b:8a:b2:54:d2:4c:
30:01:a2:93:bb:92:b8:e1:74:41:36:e8:1d:9e:ce:e1:6a:84:
84:2b:58:9c:88:74:4d:98:4e:a6:d0:b5:35:d8:73:c4:84:c8:
66:cc:67:3b:fd:53:45:8e:b4:5a:d2:74:ae:ba:4c:58:bd:d5:
01:35:26:f8:e9:a8:4d:30:fd:25:a4:d6:50:fd:ec:d3:f4:57:
d7:18:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:58 2025 by rpki-client