Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: ck092O2j4Dbz2rEPt8j3Y0hs2j7lc38eZ0ewaN3JERk=
Subject key identifier: FC:2A:2B:27:36:CC:18:ED:D7:2C:8B:5C:92:DA:8C:E8:34:23:10:44
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 0197B96AD3F281C844851CECD1E6708E943F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: D6
Signing time: Sun 29 Jun 2025 02:01:15 +0000
Manifest this update: Sun 29 Jun 2025 02:01:15 +0000
Manifest next update: Mon 30 Jun 2025 02:01:15 +0000
Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: TY0vL4ZXu5rrQbrwmS5APfLmT3CxG0sOqe16E5dX4PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:d3:f2:81:c8:44:85:1c:ec:d1:e6:70:8e:94:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Jun 29 02:01:15 2025 GMT
Not After : Jun 30 02:01:15 2025 GMT
Subject: CN=fc2a2b2736cc18edd72c8b5c92da8ce834231044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:7a:e2:df:85:48:69:f1:58:6c:80:ba:38:
53:22:e5:7b:c2:e5:95:b3:a7:72:34:c5:28:26:c8:
64:5b:14:f1:3c:c6:a0:ae:48:68:8b:16:33:b5:09:
60:f6:81:fa:ca:c4:30:bb:36:65:73:60:0c:9a:b3:
25:07:2a:37:dd:ba:ff:f4:8e:5a:16:5c:b9:ef:38:
6a:2b:6b:0c:02:28:3c:2e:1b:b4:6e:92:48:5b:8b:
1b:f6:f2:ef:8e:3c:a2:3d:9c:71:57:4c:6b:22:85:
58:e7:33:fc:95:26:d8:95:ed:3a:be:82:2f:ee:26:
e3:7d:82:8b:cd:f6:41:09:15:3c:d9:93:87:47:b9:
be:bf:6b:3c:4d:d2:5d:89:de:bf:19:51:0b:43:ff:
40:59:84:eb:b2:9d:67:d8:2c:81:80:1d:1f:8f:e5:
81:b3:24:ab:b7:85:bc:bb:9d:2b:f9:41:24:c4:50:
eb:bf:5f:44:58:61:6a:e2:e3:14:8c:48:7a:4e:4c:
2c:a9:65:99:dc:36:3b:19:0f:01:13:c2:02:38:a2:
e2:bb:37:1c:f6:30:83:c6:31:78:f2:8b:2a:4b:33:
f1:de:73:5e:24:63:c2:90:97:f9:17:75:54:dc:e6:
9b:02:10:80:f8:d5:a8:61:86:31:7f:3b:62:50:9e:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:2B:27:36:CC:18:ED:D7:2C:8B:5C:92:DA:8C:E8:34:23:10:44
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:69:bf:4b:38:57:23:27:e6:ea:92:53:48:d9:15:c5:2b:86:
35:34:94:4e:7b:ea:31:3d:bf:64:19:10:aa:2b:45:73:c7:58:
ec:32:18:1b:37:a7:e2:a1:29:b9:41:6d:01:f2:74:83:dc:21:
1f:07:99:94:ad:dd:d3:9d:f2:fb:c4:81:8a:04:a1:68:cc:7d:
bf:e4:95:5b:be:f9:52:4f:bc:06:57:8f:0c:49:38:7e:d2:a8:
e9:f0:bf:b2:08:0b:f4:e9:50:60:a1:ce:00:d9:15:fb:10:44:
79:45:75:d6:4d:3c:17:65:8a:e2:7b:68:3f:eb:79:b7:85:4a:
89:5b:de:a9:d6:b6:cb:7c:1b:20:3e:2b:1c:03:20:35:11:55:
eb:cb:83:de:49:ab:5e:bd:38:ac:a3:1b:32:eb:fc:13:6c:91:
13:3d:88:4f:03:73:31:24:48:27:ea:46:20:8c:7b:09:48:ca:
2f:29:bb:f0:c5:10:8c:b5:c8:98:bf:a0:c0:58:f7:03:b3:d2:
39:9e:bc:70:2b:b8:6b:05:45:40:f2:55:6a:27:9b:31:21:49:
fe:82:cc:f4:7e:44:0a:ce:70:39:09:42:4f:35:92:7d:47:41:
b1:dd:b3:8d:3c:3d:e8:56:7c:47:38:91:0a:23:41:aa:cb:0e:
7e:8f:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:18 2025 by rpki-client