Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: 6wZLMjEVW7JLi+1089+oUgkqm3UhWr6dGQaa98nepfE=
Subject key identifier: BA:9C:58:24:1F:D4:4F:9E:7C:A0:E9:C8:81:11:A2:05:E6:28:B8:52
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 0197C2DB92C5290CA95BC8C8E3966B78CEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 13DA
Signing time: Mon 30 Jun 2025 22:00:59 +0000
Manifest this update: Mon 30 Jun 2025 22:00:59 +0000
Manifest next update: Tue 01 Jul 2025 22:00:59 +0000
Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: Jl/B6WRrHvRsXpp7cA0Kob7HBu3HxvnqEb9B714CUKc=)
3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:92:c5:29:0c:a9:5b:c8:c8:e3:96:6b:78:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Jun 30 22:00:59 2025 GMT
Not After : Jul 1 22:00:59 2025 GMT
Subject: CN=ba9c58241fd44f9e7ca0e9c88111a205e628b852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:18:55:ce:a2:10:35:bc:f4:1b:3d:ba:89:
3d:ec:10:91:51:31:38:e7:14:3c:de:7f:f4:ac:9e:
10:51:84:52:2b:ce:46:36:a0:38:db:e5:6d:e9:94:
9d:7d:5a:8e:38:d2:08:3d:0b:d4:b5:da:5e:d7:06:
03:0a:fc:a6:95:9d:64:48:66:68:f2:00:8c:ff:a0:
66:4f:1c:f4:80:db:e1:99:c2:2d:4e:6b:08:9f:ba:
cf:de:07:cc:0e:9e:40:12:c6:84:55:ca:6c:de:dc:
72:55:99:42:c5:4f:85:48:4e:02:77:b1:7b:8b:ad:
fc:00:94:f0:ac:70:75:3e:fc:4f:11:f8:56:07:26:
e8:97:9a:e7:ec:eb:ea:4c:e9:f2:f1:7f:58:55:56:
95:43:7b:31:e2:9c:fa:88:b8:8d:42:99:e9:47:8b:
42:77:cf:bf:67:48:02:ec:6e:a7:2e:ea:e1:64:f4:
24:98:fe:1d:a7:07:f2:9b:db:17:4c:7a:1a:f8:6c:
4b:d7:64:87:4e:e4:f4:ed:75:1c:0c:73:d9:b1:12:
03:8b:f5:63:f7:02:7d:75:5e:7c:c0:38:7f:75:4b:
3c:f4:22:7d:9b:f6:f8:ba:f2:3b:7b:3a:f5:d5:4e:
db:26:de:85:ce:b3:f4:2a:46:3a:46:31:f7:2a:66:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:58:24:1F:D4:4F:9E:7C:A0:E9:C8:81:11:A2:05:E6:28:B8:52
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d9:46:de:51:12:f2:95:c9:76:77:82:75:56:b3:91:11:b4:
57:5b:89:b3:87:7b:80:7f:16:0e:69:e0:83:27:aa:d8:5b:b9:
69:6f:c7:46:3b:3d:6e:f0:67:b3:66:f2:8b:33:ee:93:8f:7e:
e7:c5:78:be:e8:c1:94:12:be:e3:80:2f:9c:b8:11:7e:95:5a:
85:6e:a8:cb:0a:61:73:a3:7a:a9:62:fd:3c:af:84:ba:0b:7d:
9d:41:00:b2:40:aa:29:cb:6d:0a:02:6f:3c:3e:1f:c7:9f:4c:
e4:28:4f:b5:fe:e5:19:15:ab:79:8a:d9:97:b5:52:71:ab:f0:
76:5a:05:11:f4:a5:7d:81:b5:5f:d4:45:26:b0:9e:04:ff:d2:
7d:55:38:c2:a6:12:89:da:c8:85:55:25:8e:2f:3b:fa:aa:31:
ff:aa:6c:3a:fd:36:1e:ed:21:8d:33:bb:61:0a:36:ae:49:45:
b6:94:b0:68:3c:57:fa:01:bd:7c:d9:74:59:44:37:6f:45:55:
a4:f5:e9:8f:6f:4d:1e:44:c0:33:79:1b:65:b8:3b:98:53:3e:
a9:52:81:a6:cc:e7:67:fe:2f:43:b2:28:8f:4c:09:fb:49:3a:
15:db:25:0e:f0:c3:9c:f9:fc:a5:39:0b:bc:60:0a:bc:f6:ee:
93:83:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:25:47 2025 by rpki-client