Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: KqZh+2oF12X9m/pnYstcr+zrkvsG9l7OCdwgWriAPMw=
Subject key identifier: 5C:83:0F:4D:B3:3E:B5:FC:0D:67:85:EF:8E:D8:DB:96:5B:5E:1D:4E
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 0197B6A21E2AD5BFB58E488A428650D6123E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: lNu0QMzG1NqjyPHsJKrP5aiMUE2uJJup+zGwsjtPn4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1e:2a:d5:bf:b5:8e:48:8a:42:86:50:d6:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=5c830f4db33eb5fc0d6785ef8ed8db965b5e1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:1b:2e:37:41:01:2a:27:98:86:a0:3c:0d:
6b:66:b1:a4:39:e9:5c:ae:74:48:c2:bb:a8:fc:df:
e4:98:fa:a7:85:92:18:fd:c2:fa:28:4a:36:ae:6d:
00:13:8a:cf:28:ab:b4:1b:47:ce:6a:93:77:7a:ec:
ed:46:dd:8d:53:91:6f:60:23:9b:d6:64:47:ea:d8:
86:a6:34:84:25:9b:b7:4b:54:8b:ac:5e:26:a8:1a:
af:84:b4:4c:e6:e0:37:28:33:59:e3:59:c0:80:46:
e4:67:c1:44:0c:26:36:e7:c3:53:83:cf:5d:79:1b:
36:fa:1a:6d:88:a1:c3:11:8e:16:08:b7:64:22:90:
56:15:25:77:33:5c:2c:54:69:64:22:cf:17:dd:5b:
52:e1:89:5c:da:a7:93:99:f4:21:c9:db:0d:26:fe:
ab:63:2b:64:26:cd:c9:2a:fd:8a:91:ce:f2:d0:25:
10:0c:f8:78:7d:0a:6a:3f:15:f5:e0:e9:0d:ca:15:
7d:44:53:ac:85:dc:03:4a:f5:f1:e5:03:1f:1c:c2:
ee:20:ae:b8:c9:c6:e6:cf:7a:03:17:2d:4a:75:41:
3e:5f:21:34:9b:e2:89:1c:4a:0b:fc:4d:a5:73:48:
18:49:16:59:34:6c:65:c2:c9:d2:f8:26:dd:25:8c:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:0F:4D:B3:3E:B5:FC:0D:67:85:EF:8E:D8:DB:96:5B:5E:1D:4E
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:63:1e:71:8d:b2:19:c9:51:85:ad:b2:61:f0:67:9e:7b:16:
39:71:06:44:4b:fc:f5:52:6f:ca:c7:d7:5d:93:6f:32:d6:0c:
3c:9d:53:f3:1d:fe:ad:44:23:f7:c4:07:7c:2d:96:e2:1c:b6:
0d:d9:c9:da:77:79:1e:6a:f7:b7:93:c8:50:6e:b8:ab:fa:fa:
a1:b3:de:ad:6f:70:8f:0c:1e:a0:df:4a:b3:23:c7:f7:88:d6:
c7:24:b2:0f:92:85:c4:43:5f:9b:86:05:3c:ea:14:13:e9:8b:
b2:f5:e2:70:40:f6:0a:3f:14:93:b9:c0:8d:71:c6:f1:01:df:
1e:30:81:bd:78:1e:fb:e8:60:05:2b:a5:e2:b5:ea:1f:11:8a:
e0:1b:08:b1:a0:d0:e9:fb:c0:2d:a4:8d:21:ff:72:b6:02:49:
cd:5d:5f:67:9c:8f:fe:a6:16:ec:5e:0d:bf:27:65:df:fe:cf:
0a:2a:07:44:f4:c7:e2:92:70:30:93:74:82:db:a5:4d:e0:39:
a8:d8:29:62:d4:ea:20:a8:e8:6d:28:fd:ae:0a:c3:42:81:fd:
03:19:aa:8f:c4:d0:c6:79:37:99:2b:13:6a:6c:c5:d4:5d:48:
06:e7:66:f3:c3:f7:f5:35:4b:23:1b:85:b1:76:e7:f1:b3:8e:
28:7b:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:09 2025 by rpki-client