Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: lGTolZBDK/Wmvpcz4ZwETuMD900lKU2rfx7d3W3glsw=
Subject key identifier: 3B:38:B7:02:6F:25:C7:A9:D3:74:74:67:2C:E4:AE:E9:4C:EE:8C:3F
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 0197C07F29FA7FC2EA42F75077DFA1057244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 03E0
Signing time: Mon 30 Jun 2025 11:00:48 +0000
Manifest this update: Mon 30 Jun 2025 11:00:48 +0000
Manifest next update: Tue 01 Jul 2025 11:00:48 +0000
Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: gqHKlhVSmc1IYOsqMiou8Aajn7svhjQOoVWCAR+ULO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:29:fa:7f:c2:ea:42:f7:50:77:df:a1:05:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Jun 30 11:00:48 2025 GMT
Not After : Jul 1 11:00:48 2025 GMT
Subject: CN=3b38b7026f25c7a9d37474672ce4aee94cee8c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:46:95:f1:b6:6c:f7:5c:e0:fa:f2:ad:99:
59:cb:57:8b:80:f6:41:cd:7a:5d:31:da:21:c3:85:
47:ee:4c:2d:43:c8:81:03:42:31:24:fa:9b:78:e0:
ea:ad:57:1c:75:d1:dd:1b:03:45:be:0e:f0:cc:db:
0f:81:15:3b:54:e0:4d:3a:d5:44:76:f4:79:7c:63:
09:4a:c1:4a:41:0f:12:4b:81:51:9f:63:44:9a:e7:
72:91:14:dc:89:1f:75:21:0b:e6:55:06:71:0e:a5:
75:54:7f:09:9a:cd:36:17:c1:da:f8:d7:f6:e0:16:
57:5b:6c:23:03:e1:9a:b4:f7:58:00:23:7d:ea:d2:
ef:c9:ff:ad:e9:ed:07:7b:0e:1a:e9:d3:f7:3e:d1:
e0:ff:7f:bc:5c:d5:52:5a:ec:19:bd:31:8d:50:74:
71:59:ff:43:86:e4:eb:a6:fb:81:2f:73:eb:11:bc:
ce:b9:de:06:3d:76:ec:bd:74:e8:05:65:9b:1e:d4:
d2:af:9a:e5:1a:f0:5d:e8:a9:31:87:40:bd:ef:d1:
c3:6d:a0:8f:73:e6:47:ff:55:18:ae:de:e8:4e:0c:
cf:53:43:15:35:13:34:3a:95:96:79:92:e6:b5:50:
b8:2f:9a:e6:b0:5e:c5:92:50:1a:62:bc:b7:1c:36:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:B7:02:6F:25:C7:A9:D3:74:74:67:2C:E4:AE:E9:4C:EE:8C:3F
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:a2:4d:69:12:11:16:52:e1:ae:5b:37:91:6a:74:8e:0e:
d3:e3:24:d0:df:1b:05:50:68:c4:68:e5:43:ff:4b:95:a6:51:
d7:98:b3:b5:5e:ab:70:09:f6:f9:95:0b:87:64:69:e6:54:8a:
01:e7:31:cb:9c:da:89:fa:fa:03:3a:bc:c5:34:3f:65:8d:d3:
e2:64:5c:fc:e9:33:3e:05:94:82:fe:11:ea:25:db:21:05:70:
cd:f4:8c:44:2a:40:75:e9:10:32:65:3d:00:ef:65:ed:fb:80:
05:fa:0e:e1:a2:7d:6e:32:69:a0:8a:23:c2:45:2e:31:7b:b7:
42:48:d7:2e:58:b0:81:f1:11:16:43:70:6a:6b:53:30:9e:9c:
d2:04:f4:17:65:25:8e:d4:e7:c8:06:e9:59:bb:88:78:0a:0e:
f3:82:b8:66:96:64:d5:be:a6:1d:5f:7e:2b:d9:a7:79:2d:5b:
1e:6d:3c:d4:10:d6:f4:5e:ec:84:19:ec:2d:d3:69:14:92:9c:
00:07:ef:02:01:f4:27:4d:2e:bf:dc:b0:91:6f:a5:df:34:b4:
0d:e7:dd:7a:eb:69:eb:87:54:fc:7d:b1:ab:7f:6a:76:1e:12:
09:3a:4a:5f:1e:2c:03:ce:6e:7e:d0:de:19:ae:c2:5f:74:22:
6f:4b:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:40:33 2025 by rpki-client