Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: BwjtB+xRIQJoUGSsbDdXdpRD4tp4xcP8VmgfJ/5UwJU=
Subject key identifier: 99:45:2F:06:D5:D4:11:49:13:90:21:93:71:57:F6:63:F2:50:EB:97
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 0197B9D8E2C9CD22AA6BDC17D431D97F65B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 11DD
Signing time: Sun 29 Jun 2025 04:01:28 +0000
Manifest this update: Sun 29 Jun 2025 04:01:28 +0000
Manifest next update: Mon 30 Jun 2025 04:01:28 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: XCqimBum086CmzxR7BryQRkyvKoJDzmWH2QCVBpPKGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e2:c9:cd:22:aa:6b:dc:17:d4:31:d9:7f:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jun 29 04:01:28 2025 GMT
Not After : Jun 30 04:01:28 2025 GMT
Subject: CN=99452f06d5d41149139021937157f663f250eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:d7:44:b4:08:58:24:4a:45:7e:34:52:13:
bc:12:98:6d:09:9c:69:78:3f:04:e8:b4:c6:15:ec:
8e:fc:d8:72:c3:fa:37:42:3b:73:f4:dd:01:e4:28:
c8:06:08:54:6f:c9:75:61:79:fe:ae:d3:3c:24:30:
6d:3a:75:4a:44:0e:3e:ed:3d:1a:d1:bb:3f:01:a5:
42:4f:2c:68:46:3d:b9:fd:a6:48:0f:c9:a0:c6:44:
e0:6a:04:53:ee:ea:78:ab:6a:ad:b8:c1:e0:27:7e:
2c:0f:86:59:d8:be:a3:d2:b6:d9:e1:94:dc:b7:c9:
60:07:0b:db:c6:d2:25:0d:a1:ef:3d:39:d5:ae:7f:
f4:ae:2a:95:33:af:3d:fd:de:01:64:88:26:84:dc:
9d:e0:33:c7:92:66:46:6f:96:57:66:48:1b:4f:0a:
88:5e:a1:8b:1d:6d:f9:7a:f3:ef:4d:b5:93:7b:19:
fe:ea:14:08:5e:e8:93:a2:db:37:1c:e4:be:ac:14:
b8:5e:d1:1f:89:0f:23:a3:71:5b:42:79:b3:a2:98:
e6:0b:13:dc:d1:42:ff:13:c3:d8:8f:8a:e6:85:63:
2b:da:53:2d:7d:db:be:2c:8c:6e:a5:f9:3d:ec:2a:
b2:55:62:2e:f0:70:d2:fd:30:17:e0:44:85:ba:5c:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:2F:06:D5:D4:11:49:13:90:21:93:71:57:F6:63:F2:50:EB:97
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:ee:63:d4:e7:40:ce:e4:c3:38:aa:ed:b4:50:55:ce:73:
63:24:b6:56:32:cd:69:bc:f2:a4:a5:99:14:7b:15:c0:24:b2:
f1:3a:07:83:4b:c6:53:b9:4e:70:69:e3:9e:0e:8a:a8:34:68:
84:0d:c7:72:c9:4a:dd:95:8f:95:cd:60:be:5a:d2:bc:2e:61:
40:5c:4a:63:8b:4b:b6:9b:6d:58:40:a5:ad:d8:6e:1a:82:25:
48:68:9e:b6:18:44:79:1c:77:1d:e1:8f:ea:12:94:18:45:67:
1d:5a:68:f7:8b:ab:84:da:a3:f8:5e:c6:a4:d7:02:07:b8:1b:
d6:d7:ae:40:61:55:9f:86:21:84:f1:60:db:a1:96:70:2b:3b:
78:30:90:95:4e:8c:21:a2:dc:3b:53:21:ec:3b:da:bd:5b:3d:
82:73:e2:e6:86:d1:df:eb:ed:74:fc:4e:0d:a6:c9:fc:67:8e:
78:cf:71:c7:37:59:83:7d:49:de:7a:8a:a8:6d:15:ab:2d:cb:
59:d3:8c:04:2d:e9:6e:ad:b6:43:50:ae:5e:0d:ae:7f:6d:b5:
a3:23:05:43:75:c5:c3:74:5b:91:d4:25:5d:9e:16:bd:64:b4:
bb:98:19:11:69:69:8e:3c:39:f8:2b:e5:18:28:b2:ad:5e:ad:
e6:f5:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:57 2025 by rpki-client