Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: TxQN8mqnMaqFR2IkUqdur4kIRrV9DuZRlWX5FR2qo3U=
Subject key identifier: 0E:3F:46:A1:55:0B:37:36:BB:07:50:F0:A1:4E:E5:CE:87:57:C6:0E
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 0197B6D744C53DA4DF37486A59593405AE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0BDD
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: Qx43tfquAEN/d9MLYeWkzi38fah3jHET8k8W/MsQNkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:44:c5:3d:a4:df:37:48:6a:59:59:34:05:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=0e3f46a1550b3736bb0750f0a14ee5ce8757c60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:d0:70:60:7d:24:44:db:05:6b:20:12:7f:
c6:5f:f4:35:b4:85:b0:07:cf:f9:5f:9a:e5:9d:15:
82:19:59:e9:19:94:fd:ea:de:c5:9b:48:9b:b5:b8:
72:07:a6:4e:0d:81:6e:9e:6b:19:a0:f1:71:da:ad:
1f:8f:a4:7f:36:2d:3e:c1:f4:66:a7:50:50:e6:2c:
43:81:21:29:5f:fb:2b:21:bb:9e:0f:c3:d4:98:21:
7a:85:24:f8:19:9b:ff:97:86:9a:15:63:e2:4c:69:
a9:18:7e:8c:b8:09:74:f5:f7:e7:25:cf:b7:64:40:
e9:17:de:f8:91:17:7f:d0:5b:2d:57:34:e6:d0:0e:
37:f9:91:a5:2c:c6:a0:9e:52:d5:79:a2:43:dc:98:
cc:a6:b9:23:af:67:b1:ae:f7:01:b6:dd:de:ea:f7:
67:db:4b:6e:e7:b4:80:23:1c:37:6d:3f:b0:29:81:
45:fa:6e:88:4b:a8:fb:1e:aa:9c:0b:d1:fe:8a:11:
e7:53:38:71:03:be:8f:52:11:a4:c5:1e:14:1d:e9:
82:7c:28:cc:75:c3:87:5e:be:4f:2e:bf:f5:0c:7f:
46:5e:4f:6b:4c:77:8c:77:8f:62:68:e3:e7:2a:c5:
46:1c:30:57:c3:4b:64:42:7b:f8:44:6a:96:95:8b:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:46:A1:55:0B:37:36:BB:07:50:F0:A1:4E:E5:CE:87:57:C6:0E
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:88:5a:02:ee:b0:b8:82:27:4c:70:48:72:21:4d:b7:b7:49:
e9:df:93:00:b9:e4:30:ca:f9:7c:cb:3e:ee:f0:9d:04:7a:2c:
18:f0:29:06:90:8f:0b:08:e6:42:5c:09:87:ca:58:ae:4a:94:
74:51:e1:b4:6c:1a:c0:6f:92:df:41:1d:66:9b:da:d1:72:28:
fd:0e:84:9c:f5:10:77:29:70:6a:c0:7a:7b:95:a8:fc:0b:d6:
d9:20:3f:e9:2e:b4:98:95:2f:16:11:8c:4b:8a:45:e6:3c:1c:
0f:ca:2c:88:77:af:c1:90:35:06:07:c4:0b:a4:ac:4e:6e:40:
d6:70:a0:25:05:79:51:cd:a6:ba:8d:bf:fe:42:6d:e7:c5:5e:
91:81:38:8d:65:4e:12:6a:88:59:2d:e4:f1:f9:d4:db:7e:a6:
d8:e0:b7:8b:21:8b:63:a8:f5:d9:df:f8:3d:36:fc:54:34:ad:
fb:67:f4:7b:25:04:7f:f3:8d:b8:1a:a1:ac:28:71:aa:88:8a:
4a:60:88:e4:18:2e:4d:a7:88:0c:ec:39:45:4e:0d:32:92:bd:
24:bd:e0:28:78:12:b3:49:7f:0e:a5:c1:d9:da:f8:ff:66:d3:
9e:82:ce:29:4c:3a:aa:fa:e7:0e:33:b5:d2:15:70:62:5a:16:
1c:1e:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:00 2025 by rpki-client