Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: aSlZimfQ8YUVrbRy3thRvHzS6nvR1BtmaC8ioZIGl78=
Subject key identifier: 58:01:D0:7F:E8:F6:C4:F2:AF:6E:3A:0A:A8:09:86:30:51:D7:16:76
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 0197B77CD5FB9840CD6D080691EFE8BDE65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0C74
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: Me1o8dyUHHNmXCYjmy8wMvolnw015L/Id6faF+ld8vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d5:fb:98:40:cd:6d:08:06:91:ef:e8:bd:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=5801d07fe8f6c4f2af6e3a0aa809863051d71676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:72:65:5b:58:a7:6b:07:13:05:3e:34:9b:
54:91:27:5f:8d:50:ba:5c:3b:f7:09:a5:b4:c5:6f:
4b:ec:88:34:a8:7d:f5:74:13:02:d2:26:08:eb:04:
71:79:3f:df:01:a5:09:d0:dd:4d:b3:25:9d:b5:16:
ec:ac:dc:e2:3f:88:5b:a5:fb:a2:05:d9:c4:10:82:
68:e8:d1:6b:5d:c6:5c:d7:09:84:00:90:47:70:0d:
5d:af:b3:72:e0:a6:09:55:1b:6d:5e:a9:d1:c0:ba:
1f:54:ee:23:4c:89:06:3c:89:c3:5c:67:ad:42:67:
ec:14:8a:99:51:dd:f8:01:67:a0:23:12:56:1c:f6:
24:d4:48:c2:83:2a:ed:c7:d8:c0:03:64:09:3d:f9:
86:c2:0c:46:eb:74:17:39:4f:fc:4e:4a:75:50:bb:
4b:0f:8f:9f:b6:87:62:de:ee:ad:6e:06:05:b0:f6:
39:67:26:76:e1:da:72:34:9b:36:d1:8b:fb:3e:1e:
90:0c:e7:31:1a:7b:4a:17:f5:b0:fa:80:9a:59:43:
91:7b:25:39:5a:c1:74:d4:da:5d:2f:43:81:8d:43:
50:10:9e:9a:11:73:51:65:0d:91:fe:5c:a1:78:c0:
90:31:3b:87:71:fa:bb:7e:5a:97:32:82:13:c3:03:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:D0:7F:E8:F6:C4:F2:AF:6E:3A:0A:A8:09:86:30:51:D7:16:76
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:20:c0:c1:bc:36:03:6f:71:cd:20:5e:12:fb:df:e4:86:a4:
56:5e:41:22:5f:c9:30:4b:8b:8d:d8:07:e3:84:14:a8:3f:5f:
02:60:c9:9c:84:66:60:26:c2:a0:d4:c6:e7:19:ac:79:9f:d5:
f9:ba:29:13:00:e9:a4:99:4f:ff:e9:25:b3:07:82:cb:c3:b5:
21:34:bb:fc:33:02:a0:35:92:e1:cc:a6:1e:14:a3:92:93:3a:
f2:47:3f:bd:51:6a:59:54:4b:b5:4b:7f:bb:d9:11:f1:0b:ea:
09:a8:bd:0d:68:68:60:05:65:2b:d2:55:be:19:b3:3c:b6:6b:
47:e5:05:80:a7:ed:b9:0e:cc:19:12:17:72:c5:36:ed:45:2d:
16:75:18:c3:30:dd:e0:05:92:4c:c2:63:0d:f9:cd:a6:0d:a8:
58:8d:2f:26:4b:37:50:ca:38:38:89:21:7d:36:97:5b:50:29:
2b:ec:0b:6c:ed:78:d9:34:88:1c:4a:7e:f7:7a:f9:7e:19:68:
89:02:d5:f9:11:dd:c6:35:54:01:5c:e3:20:56:04:ae:31:50:
05:c2:67:ed:4e:7b:7e:bd:7e:82:d4:13:7d:b7:26:69:45:3a:
92:70:45:31:8c:b2:c7:d7:9b:01:e3:33:85:3a:10:b9:7c:81:
19:6b:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:32 2025 by rpki-client