Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: 4NJLsHEwYhAZrpVvo/hNCcMNSUMHDqxuSDNUxpadUvE=
Subject key identifier: 35:8D:6A:28:07:FF:ED:B7:50:1F:36:2E:44:40:7C:EE:74:4E:70:97
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 0197B6A1763BAEEB058F1AF8CE65BC9E59DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: eSLlUlt3XN8L70UDw32FpfK3+aO5c3nBX8tpTs2yiIg=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:76:3b:ae:eb:05:8f:1a:f8:ce:65:bc:9e:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=358d6a2807ffedb7501f362e44407cee744e7097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:57:5c:02:a9:4e:c2:94:07:d3:14:26:3d:
81:b2:32:8d:45:84:24:6d:92:f8:eb:1f:2c:8a:dd:
59:be:84:8e:a6:69:cf:c7:bc:79:aa:57:92:22:70:
c6:18:0c:ca:da:bd:3e:ab:8a:9a:a2:42:b9:f8:6e:
0f:a9:97:09:9e:49:a3:9e:ae:74:79:5a:66:ad:f1:
0a:01:49:a7:b5:9e:91:78:e8:94:69:96:3c:3b:74:
2e:9e:f7:90:85:ed:25:91:53:40:15:cc:61:54:51:
55:b8:7e:4e:38:f8:fa:b0:21:6b:1d:20:d4:cf:18:
3b:96:2c:71:11:4f:e1:ae:90:a6:ac:7a:f0:52:e7:
ac:38:99:8f:3a:5a:07:3d:cd:bb:15:9a:cb:09:9f:
31:d9:00:8c:6a:d2:dd:55:25:a7:ed:95:5f:13:66:
b3:8a:9b:9d:9d:11:ba:73:42:2a:09:69:00:96:ed:
84:e0:3a:7b:6d:c6:c1:73:5f:aa:51:0c:c8:be:0b:
dc:47:4c:9b:13:10:7c:92:86:2c:36:8f:31:20:31:
ea:65:1d:f5:47:71:42:72:bc:1c:8c:ed:97:61:a4:
83:c5:7c:47:2d:6d:66:f7:f7:42:22:06:f7:d0:90:
94:1b:28:c3:50:56:e0:95:51:68:9e:ae:3f:d8:a4:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:6A:28:07:FF:ED:B7:50:1F:36:2E:44:40:7C:EE:74:4E:70:97
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:fc:06:b1:22:33:2b:ba:ea:5b:70:9d:24:dc:7a:4c:54:
60:24:13:b8:9b:13:32:c2:1a:25:21:e7:85:0b:a3:63:93:8c:
90:a1:dd:cd:88:15:52:28:25:78:da:35:87:86:9a:a5:85:ab:
aa:14:4a:55:80:bb:b3:9f:7b:af:a8:7b:e4:3d:59:1d:bb:0a:
df:57:82:d7:66:46:ed:ee:a3:49:b8:68:37:ac:a6:85:fc:a3:
90:58:71:7f:99:c4:df:60:6b:1c:57:57:a6:c7:d6:9a:c4:38:
ad:e8:47:6f:d3:34:51:93:a3:96:a4:23:7f:4c:c3:ed:e5:fe:
2c:63:dc:f2:cb:f5:1d:e6:06:00:bc:00:56:a8:22:f9:e2:15:
a3:eb:9a:ff:dc:7c:ea:8a:73:b9:e8:25:8f:4d:fb:9f:0e:03:
8a:1d:26:d6:b4:5a:a0:fd:69:9c:fe:8f:40:05:b7:cc:a6:9a:
20:54:42:ef:b6:23:69:59:9e:17:d3:d0:6d:d3:7e:f5:53:a7:
74:eb:29:ea:81:ae:63:fd:57:2a:12:0c:28:f3:cb:d0:17:c7:
4b:48:c1:0d:53:34:11:fe:95:f3:dc:10:ac:22:95:ec:d8:3c:
14:59:57:af:c2:49:10:d0:da:f0:b6:1b:f8:0c:24:11:db:ec:
ca:7b:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:32 2025 by rpki-client