Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: Sx5qpMcFEUyUVrtFCfbNNe/HIb6IAXDQYPg474fr+vA=
Subject key identifier: E8:42:B1:09:18:B9:3C:01:C1:4A:E6:8C:32:05:9A:35:95:2F:0E:21
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 0197B9A1CBE18B44012658B7DB76BB6DA4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0EEF
Signing time: Sun 29 Jun 2025 03:01:17 +0000
Manifest this update: Sun 29 Jun 2025 03:01:17 +0000
Manifest next update: Mon 30 Jun 2025 03:01:17 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: AxN1LBZFK36i42bAFXv03SWZ330hu6VCk9sJq8RLBHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:cb:e1:8b:44:01:26:58:b7:db:76:bb:6d:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jun 29 03:01:17 2025 GMT
Not After : Jun 30 03:01:17 2025 GMT
Subject: CN=e842b10918b93c01c14ae68c32059a35952f0e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:77:71:b7:03:ff:f0:be:c3:7c:f4:ea:37:
4e:dd:92:33:04:c7:27:7c:5c:bb:0e:b4:a7:77:63:
29:ac:2f:08:be:c1:81:84:e8:84:a0:d1:cd:48:2d:
70:74:02:b9:a2:38:a4:82:b9:71:2e:a7:b2:72:1b:
2a:c0:e6:8c:e6:17:76:12:68:b5:98:c1:d4:a1:cd:
51:47:3a:31:62:29:09:8d:9f:67:6a:cf:2a:e1:44:
3b:7d:e7:5c:1d:55:06:52:6c:0c:2f:53:0a:9a:4c:
41:f8:3e:d2:4e:9f:86:4c:0d:d2:c3:15:87:ee:ec:
1b:65:66:09:fc:dc:6e:5b:1a:71:25:fa:5b:f0:1d:
fa:1f:c4:21:30:03:cc:2b:bb:76:bc:09:1f:24:f1:
4d:ce:4a:ee:23:cf:87:25:dc:5d:ed:9c:3c:16:1f:
5b:d9:18:7c:81:1d:5f:96:c1:f9:48:e4:16:d2:1c:
c2:f1:c2:89:b2:f3:d3:48:44:28:b0:16:83:3e:cf:
08:ed:0f:3e:c7:c8:e4:75:e8:db:d3:42:2b:b9:4d:
9d:f3:83:c9:d4:bd:a4:c8:07:10:8e:2c:54:34:4c:
d0:e7:eb:14:1e:10:6f:70:f4:7c:30:08:3a:12:57:
18:d4:6a:33:e4:4e:c3:9d:7a:8b:f6:cc:5a:4f:db:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:B1:09:18:B9:3C:01:C1:4A:E6:8C:32:05:9A:35:95:2F:0E:21
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:8e:b4:66:3c:e1:07:8d:a7:de:ff:3d:d2:72:5c:78:69:
d3:c1:bb:f3:f5:1a:3f:fe:e0:55:fb:21:73:0d:87:26:89:0c:
95:d7:79:5c:b3:9d:47:01:bd:b7:8c:a8:14:ff:d4:35:4d:0c:
47:11:8e:2f:c3:a0:0a:b9:ef:2b:de:f6:85:05:4d:94:a1:c5:
c6:03:fa:8e:57:e1:96:00:b4:ed:34:15:d7:08:21:0f:cc:d6:
ef:37:40:12:a1:8a:40:91:ca:0f:af:a6:70:f7:a4:b8:cf:e8:
5c:21:b6:0f:35:38:69:10:1c:30:6d:b1:cc:76:a3:07:0c:d6:
c8:d9:f6:f0:b5:30:78:04:e1:1b:c9:d9:0b:f8:5c:47:a6:bb:
a7:58:bb:66:5c:1b:63:14:9a:a0:ff:42:bc:ee:4b:e9:de:66:
1c:7a:c8:02:16:8b:11:1a:ec:c7:a6:85:12:61:ce:f5:dd:b3:
de:0b:ad:b4:8f:2b:72:c3:49:e0:0a:39:c7:12:35:4a:e0:71:
e7:94:de:95:8a:c0:a2:f4:68:0e:01:4d:37:dd:ae:94:6b:12:
65:f5:8a:13:dc:aa:5d:71:11:d5:a0:29:63:8c:aa:19:39:ec:
c4:2f:39:75:9f:17:2d:a4:cb:ab:a5:66:22:4c:f8:13:26:9e:
a3:6e:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:59 2025 by rpki-client