Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier: 4HUD/z7dDHzqetU+37XpFn6uESI7VV/3Z97CwWti3JU=
Subject key identifier: 86:25:00:55:02:C8:89:50:5A:DF:6F:34:A3:41:D5:AF:0B:61:35:0E
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 0197B6A19B23F1A9C7ED8EAD106AEEE184EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number: 03F7
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: mu9Ei8LkVg9wxDRO/poRiDpvPYk5CcVwfjlunApXpyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9b:23:f1:a9:c7:ed:8e:ad:10:6a:ee:e1:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=8625005502c889505adf6f34a341d5af0b61350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:b3:2a:cf:1b:37:c9:b2:52:1d:94:bb:36:
25:af:ae:09:be:df:fc:47:31:a3:55:f2:64:e2:14:
6c:97:f5:bd:68:a9:53:99:17:36:4e:1a:ec:a2:40:
c4:d7:14:c9:d5:60:ce:28:b8:5a:39:09:4a:1b:21:
39:1c:3d:2b:da:be:ed:2a:64:20:f6:56:ca:f9:00:
40:07:f1:6d:9d:5d:ba:a0:7b:35:16:89:64:85:e5:
88:ed:97:c7:e0:82:2b:da:7c:b6:54:72:85:87:de:
2f:b0:08:d7:b7:8f:35:17:cb:7a:42:51:4f:b7:1f:
36:c4:6d:a3:7d:e4:f1:bd:5b:30:22:dd:e4:ff:69:
e5:56:24:e6:5b:e7:f9:53:02:ed:56:d1:33:e5:e8:
92:37:e9:15:c4:bb:2c:32:0b:54:1c:16:62:43:2f:
ae:a2:77:43:1d:23:ac:c7:2f:0e:d7:52:f1:7b:eb:
b7:36:5e:1e:91:3e:27:2b:b9:4a:cf:05:91:c7:48:
cc:b5:89:24:c6:e4:c8:bc:c5:9d:13:8d:a3:d5:bf:
c7:b5:1a:db:9c:28:55:b3:53:6d:4f:01:14:a9:9b:
b1:94:b7:b9:9c:d7:90:65:db:c3:b9:a6:7b:76:ea:
b7:ee:a5:c8:2a:b6:dc:70:16:02:5a:ea:0c:f2:b3:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:00:55:02:C8:89:50:5A:DF:6F:34:A3:41:D5:AF:0B:61:35:0E
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:46:74:e6:23:0b:7d:3a:db:95:90:4c:56:0b:cb:a9:df:8d:
52:52:52:87:b8:b2:ca:03:9a:78:25:d9:2d:2e:ca:c0:3a:d5:
f3:22:54:89:b6:96:79:6c:72:e2:be:b7:60:5d:4c:0c:5c:a1:
3e:6d:08:fe:7a:cd:35:f1:21:82:8a:6f:46:13:b2:ff:85:73:
fd:90:52:c2:1b:1e:5c:05:46:c2:80:89:d6:8a:57:5f:58:6f:
66:ce:c6:fe:9c:ab:f4:5d:52:fd:02:0d:bc:34:f2:36:5e:59:
f3:08:76:60:01:50:f3:3c:9c:f8:f1:dd:b1:ea:c2:80:f9:5c:
9b:1e:8c:f7:77:8b:39:3f:89:bf:72:4d:f7:67:73:99:aa:01:
62:90:f3:0f:38:1c:c0:0e:ac:26:00:c2:a8:d7:bc:fe:9e:e6:
e5:c4:0e:86:7e:df:08:bb:6a:1b:3a:02:26:fb:ef:6b:ba:22:
46:12:14:13:b4:05:aa:35:36:7c:bb:b7:8f:30:f2:76:c2:36:
dd:5f:f6:fa:91:99:16:a0:28:79:a0:8e:1d:84:fb:f8:dd:51:
32:12:a2:b1:33:dc:28:c8:3d:31:3b:db:4b:38:b4:be:03:eb:
69:9d:27:59:00:dd:50:13:62:17:c8:d5:d0:26:d5:d3:9a:8b:
39:a8:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:49 2025 by rpki-client