Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: +KPIL8vaxAYxxtdoYSgSixHpaOA/Z9AAMuQzV5mjo+4=
Subject key identifier: 40:0C:6D:EF:35:E0:F0:2E:B0:7C:F3:3C:0D:9D:A0:6A:69:A9:02:9B
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 0197B70E9E8008E83AE2453F8BF1792C2143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 10E2
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: O80yFuMwSo33vw//ZJJ8gqo/uy5000zbqwG9jEdzmDk=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9e:80:08:e8:3a:e2:45:3f:8b:f1:79:2c:21:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=400c6def35e0f02eb07cf33c0d9da06a69a9029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:77:67:a1:33:ab:24:af:4e:50:53:6a:a9:
e4:29:2f:91:fb:59:d3:e5:eb:e7:7a:de:51:0e:35:
ce:a8:3e:a9:63:c4:78:13:77:4a:9a:de:81:e2:f0:
7e:1e:dc:c3:2d:79:31:9a:dc:17:6a:a7:e0:cf:7d:
92:06:87:0e:a8:d8:3a:f8:65:a7:45:8e:03:fe:2e:
7a:89:7d:56:94:52:c7:e9:67:79:0f:ff:e7:23:e5:
2a:0e:fa:43:51:82:73:5c:26:b4:e6:37:f1:51:39:
d5:83:4d:91:6b:4c:a9:f0:f3:38:15:54:f9:44:f3:
e3:bb:23:f4:31:a6:e4:ac:d3:8d:61:03:34:3c:0a:
28:18:63:fc:fe:76:96:f5:52:c0:ff:cf:60:4c:59:
d9:cb:02:dc:7f:5b:d2:5f:b3:16:e4:0a:5a:ba:e5:
77:42:77:ba:a9:a4:67:8f:23:b9:b8:00:a4:b1:67:
32:6a:12:2f:55:71:51:39:f1:f6:a9:0f:42:b0:90:
43:eb:10:e0:aa:c8:11:33:b4:cc:2a:f3:00:11:53:
75:a3:78:cf:41:15:4c:7b:46:e2:df:e1:2b:dc:4f:
ce:a2:29:28:c4:ed:4e:a5:2f:f4:a8:8a:ac:6a:70:
d9:2f:38:85:f7:46:40:7b:c8:3f:2b:a5:c8:b2:7e:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:6D:EF:35:E0:F0:2E:B0:7C:F3:3C:0D:9D:A0:6A:69:A9:02:9B
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:db:d7:19:cb:c6:f9:d2:90:48:43:a8:10:e7:5d:a6:27:
56:5e:e4:44:93:d7:4d:87:64:74:a4:00:4f:25:ac:b2:00:e5:
a1:cf:ee:a5:09:99:43:ab:8c:8e:38:11:55:dd:fc:e9:48:dc:
b4:f1:b1:3b:2d:1d:d0:e4:f0:40:ed:b1:43:3f:fa:1c:71:a9:
06:4c:ce:d2:a3:ee:6a:4c:6d:aa:bc:0a:56:cf:e3:5d:19:78:
01:9c:4b:df:0a:0d:39:d6:e7:09:de:cc:cc:45:72:b9:7a:7a:
43:04:a7:47:d3:bb:05:de:78:dc:e5:df:a1:25:e7:90:1d:cf:
24:b9:0f:7a:3d:d2:25:0e:ad:8e:22:a8:94:8a:e0:ab:1a:27:
e3:b4:49:9c:5d:eb:21:99:15:87:ed:09:63:c8:e9:93:12:65:
26:e6:d5:9e:40:ae:2e:44:ab:73:e5:3a:63:77:84:8a:01:1d:
92:9e:0d:55:22:99:cf:28:62:67:c0:ff:da:f3:a4:02:f5:61:
49:4f:29:cc:4e:d4:59:8e:e3:00:63:13:d8:52:0a:7b:35:e2:
ed:b8:fc:0b:67:0d:ae:e2:e9:ec:03:c5:2d:d9:ff:d5:93:94:
6b:33:9e:eb:22:e0:98:97:77:d6:b0:84:64:bc:2f:6c:8b:d7:
ae:02:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:09 2025 by rpki-client