Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: +6HH6ZeLU/5uLZ5d7XTbdSQyrufAeoDr3eL+34Ylgvo=
Subject key identifier: F5:54:39:0B:27:FA:D8:54:F2:83:09:50:1E:9C:28:52:18:61:3F:AF
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 0197B77C29440AD7948ECBC7D410B0980DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: llWJ1r7z/nGzjMJykqtPAgbaXrHjSqR484Oe8Xb29iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:29:44:0a:d7:94:8e:cb:c7:d4:10:b0:98:0d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=f554390b27fad854f28309501e9c285218613faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:31:84:f3:67:61:bc:32:fc:6f:3e:bf:41:
32:31:4e:df:b0:d1:40:80:f1:99:e7:db:a3:f2:09:
9f:56:50:fa:94:5b:a0:56:89:e5:d6:01:70:f2:44:
7b:7a:04:59:f4:e7:e2:39:a6:72:20:b8:fb:3a:56:
4b:92:5e:db:42:bc:f2:c7:29:64:07:59:10:ce:dc:
90:af:d6:b6:d5:13:40:69:58:5f:57:8a:24:a9:86:
71:92:35:66:e4:61:8e:86:58:bf:60:7b:93:5a:e6:
40:a4:50:3b:d5:b0:66:e7:ec:1e:07:86:8f:33:f4:
89:12:52:ef:11:d8:52:3f:fe:5c:f2:b3:46:68:a1:
32:b2:f9:52:9f:85:e7:7e:22:6f:ad:ee:59:50:ab:
0e:65:6f:9e:6d:79:27:77:c1:14:21:10:5b:a1:75:
0a:f5:67:19:9d:be:92:88:73:9f:f8:a8:a4:73:da:
13:89:01:f4:24:0a:3a:e5:e3:27:76:26:cb:de:f6:
78:a1:d7:2f:0f:7c:7c:bd:c9:18:6d:2d:18:17:aa:
bb:0a:b5:41:d0:72:74:66:8b:a6:67:cc:b5:66:93:
7e:54:2c:32:55:56:f6:5e:ee:72:f7:b8:49:ea:c0:
b3:9c:9e:79:97:41:e4:e8:3f:12:76:6c:1f:93:2c:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:54:39:0B:27:FA:D8:54:F2:83:09:50:1E:9C:28:52:18:61:3F:AF
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:06:b4:79:d8:54:5b:60:25:34:6d:7e:2b:7d:0c:8b:ad:d2:
e0:da:a5:13:a9:1c:13:e7:e5:bc:de:f2:99:bb:53:78:2e:1e:
cd:47:ab:26:3c:c8:19:be:3a:78:25:43:86:42:80:21:40:af:
a0:cd:19:2d:b7:96:a5:d8:ab:a2:34:9b:95:20:82:f4:1e:9c:
18:a4:8c:a2:59:db:46:1e:25:f9:9c:09:a9:82:01:fd:bf:a1:
e4:18:7b:b7:89:81:32:6d:60:dc:ab:06:b1:69:95:6e:3a:fd:
6c:f0:1e:e7:ea:9d:35:7a:fa:b5:2d:d1:9d:3d:5e:4b:37:f0:
ec:21:fe:e7:f4:3d:73:4a:fe:80:90:c0:e7:fa:da:f6:f9:bb:
7f:79:e0:c8:2d:54:c1:69:a6:53:7e:82:4e:b3:27:72:21:0c:
b4:b8:f0:e4:69:2d:86:18:c4:a6:ca:ae:a1:4c:0c:1f:07:5d:
59:92:9e:1a:af:63:fc:4a:fb:bf:04:2e:46:42:7f:57:a9:e0:
54:e4:73:fd:23:44:42:f8:7f:b8:09:d0:27:7f:62:8b:10:22:
7c:69:be:3b:f5:8c:fc:f2:ff:34:35:86:9c:8f:4e:3d:68:0f:
3d:13:f2:cb:75:ba:e9:5d:26:b0:48:b2:52:ff:72:63:ce:6b:
37:8c:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:15 2025 by rpki-client