Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: iKNr1yASiiwm/NnI5LLfELepuuN3oWo9F35eV4I5+Ak=
Subject key identifier: 0D:E7:A1:21:B5:CD:C0:CA:6C:59:56:E3:48:47:95:49:CB:19:FC:DA
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 0197B6D782B637871121CFFBFC286C048E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: 0lU3dnBdXuYdMtVHwisI6u1VQDnQ8etJtBR1b+l3Uyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:82:b6:37:87:11:21:cf:fb:fc:28:6c:04:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=0de7a121b5cdc0ca6c5956e348479549cb19fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:33:b7:15:92:2e:e6:99:0c:c1:cd:c8:8d:
80:a0:4a:84:b0:9b:f6:5f:f0:a6:d0:52:49:f3:6f:
8e:e0:03:f9:a7:d0:99:62:c9:85:dc:66:4b:d4:0d:
3e:50:8b:5d:27:4f:5a:3e:f6:67:2f:c7:7c:cf:7b:
54:fa:b6:6b:b3:53:43:f5:c1:84:6b:aa:24:69:9d:
82:be:5e:c9:96:4b:b6:eb:0c:97:ad:13:27:26:3d:
c7:aa:b4:0c:98:89:af:8d:ef:a6:a3:05:78:ad:ac:
a5:4a:67:fe:a9:87:f5:84:16:24:8f:f9:35:18:4a:
8e:d0:d6:64:ff:7b:a1:9e:46:93:4f:e0:0f:ab:58:
a2:6c:c7:75:be:ce:f2:fa:61:e5:e0:31:d6:f5:fd:
b2:6e:bb:33:ff:d1:7b:98:3e:33:8f:64:27:9c:1b:
0e:b7:54:14:9c:27:17:ef:00:fb:4d:86:7e:99:aa:
9d:17:f4:eb:d8:39:a9:93:1e:2e:f6:51:37:e3:2d:
46:bb:e7:60:3f:0f:bc:a0:8e:a5:f3:5f:00:66:81:
26:68:9e:1b:38:99:eb:da:d6:2b:c2:3e:ff:1d:de:
6b:a7:b6:cc:1b:01:6c:4c:0b:58:60:eb:75:13:ed:
d8:4c:33:9f:ed:dd:57:03:18:54:b4:15:c5:3f:da:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:A1:21:B5:CD:C0:CA:6C:59:56:E3:48:47:95:49:CB:19:FC:DA
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:97:49:86:5a:eb:ff:fa:1c:f1:3d:6f:dc:f6:20:08:17:
97:b8:e4:52:23:c8:b8:44:d2:3f:7e:5a:b1:76:4e:cc:05:a1:
23:cb:40:b0:9c:73:c7:e0:5a:c6:e8:c7:74:fa:0d:49:2c:1f:
c2:f8:3e:c9:38:3c:b2:b7:1d:04:b7:d1:6b:6b:44:b6:30:d6:
39:bb:e3:13:51:cb:89:77:b0:be:a5:53:e4:f8:b4:05:a7:d3:
21:47:9c:79:93:15:63:c6:a9:3e:75:39:5f:b9:e7:07:6d:e4:
5a:f1:62:38:a4:90:e0:30:be:8c:c7:5d:67:99:6c:a0:cb:f3:
53:50:d7:40:0e:6b:b7:93:5b:98:e9:21:46:e2:55:1b:e7:4e:
92:bb:86:b1:0d:a1:8e:cd:37:58:5a:ed:1e:b3:95:65:18:32:
b3:22:c4:6c:b2:0e:d5:80:d2:97:7f:95:3e:c5:50:8c:2a:7f:
5c:88:25:74:c5:f8:5f:47:8a:df:65:66:7b:ac:a8:7d:ed:07:
2b:01:5e:8d:2c:b1:45:cc:e5:ad:c1:7c:3d:e5:56:32:e5:24:
fe:ab:5d:a1:ab:2e:1c:1f:38:51:c0:59:3f:00:af:ef:9a:78:
b4:a4:d3:1f:0d:eb:91:a2:a3:43:a2:16:fa:ed:35:4b:50:a0:
1c:bd:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:00 2025 by rpki-client