Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier: BWWIp0tijlbJ7veAH+HOuRInlTCVhyb8FNJF98LFA6A=
Subject key identifier: F4:90:9E:8C:6B:EB:B2:07:60:B2:9F:19:FB:8A:28:F2:C2:C8:C9:4D
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 0197B8C622923613670AA6F4C7A21B6CEEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number: 0479
Signing time: Sat 28 Jun 2025 23:01:22 +0000
Manifest this update: Sat 28 Jun 2025 23:01:22 +0000
Manifest next update: Sun 29 Jun 2025 23:01:22 +0000
Files and hashes: 1: ZQAyFws7DTZX8u1fY_j_CXtWmSw.roa (hash: rqxW0DHYx0WB4ZZV6XWEMvjksg8LNQ4dfFaekkzMvBk=)
2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: LuYBHmLlIwBKK5gc1WAhB2R576yTzRRY/hRHI5zYxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:22:92:36:13:67:0a:a6:f4:c7:a2:1b:6c:ee:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Jun 28 23:01:22 2025 GMT
Not After : Jun 29 23:01:22 2025 GMT
Subject: CN=f4909e8c6bebb20760b29f19fb8a28f2c2c8c94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:36:57:0a:3c:3c:2f:54:56:ad:29:5a:b6:
1f:3d:2b:c9:44:00:d3:d2:80:4d:fd:4c:5d:89:43:
2a:b0:10:7f:8c:0f:e9:cd:a6:85:fc:cc:d3:bd:ed:
26:29:f1:c1:bf:24:aa:10:f6:82:87:3a:ae:6e:2b:
9d:6b:36:7d:5c:37:af:36:af:b3:19:9f:5f:54:f3:
21:5c:67:4b:a4:8e:01:ca:ae:20:e3:a6:a0:72:9b:
22:8b:09:7c:5d:4c:cb:56:6a:d3:bc:4e:19:fe:33:
75:5f:39:1a:29:de:56:a1:aa:94:e7:9b:d6:28:40:
43:d7:73:8a:0f:f5:a5:81:e3:c1:fe:4c:66:f1:f3:
50:15:97:f0:21:fe:24:20:5b:ff:c1:f5:0d:93:56:
be:0f:67:3c:c4:29:69:6f:be:07:21:44:de:13:2e:
0b:64:64:48:1b:22:e6:7e:ba:2b:4f:82:7b:f6:cd:
14:85:c9:15:67:85:55:16:7d:7b:f7:d3:14:49:6f:
3f:ef:60:03:33:f1:91:e9:c0:f6:55:dc:1c:a3:0f:
0a:df:5c:35:40:d1:ef:61:69:9a:4b:78:05:4d:a1:
3d:02:ee:7f:af:73:d3:66:f0:85:99:24:77:75:33:
0c:79:ac:58:fb:6d:17:47:a5:58:c7:a0:22:c1:90:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:9E:8C:6B:EB:B2:07:60:B2:9F:19:FB:8A:28:F2:C2:C8:C9:4D
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:ba:8a:e4:90:09:fb:81:73:56:f7:71:74:5c:03:ab:24:
a1:29:c6:13:66:f2:97:b1:f3:d0:8d:d8:5a:2d:72:15:3a:4f:
45:63:c1:60:cb:d7:e6:5d:45:50:ab:d3:b6:1a:2a:a3:45:74:
1b:00:f4:97:d4:68:aa:0a:c3:7a:ca:9b:a8:24:b2:6e:4f:5a:
b2:d8:77:65:a2:cb:bc:ee:86:4c:7d:bb:cf:2e:31:60:6f:a9:
87:09:03:73:53:01:50:62:c3:aa:51:18:94:4f:ff:a7:9f:e0:
11:fa:94:2a:a8:5c:74:13:61:91:15:d7:03:cd:1f:cb:76:19:
2a:75:ee:27:39:15:0f:eb:3d:74:3f:b8:08:fe:6f:29:ec:51:
4d:25:56:8b:d5:10:01:a6:f9:1c:27:d6:68:bc:a4:14:c8:78:
e1:6c:ba:b5:44:89:1b:7f:e6:d8:db:6a:7a:78:d1:9f:be:9b:
3a:6d:b2:51:74:c6:a6:5d:c7:72:2a:1c:d9:e7:23:79:ff:fb:
05:34:ef:e1:6a:2c:14:aa:87:fa:d0:a1:7d:45:da:85:01:4d:
e3:6c:46:72:97:5d:d2:96:0f:36:60:e0:02:e6:e1:7a:3b:10:
b6:65:f5:c0:b3:bb:46:ce:a0:c3:d3:15:d3:c8:8f:bc:4c:ad:
8e:2f:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:14 2025 by rpki-client