Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File: j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier: fiGB2s3hKJJ4RJU26RU5XV9BdHikYziAzAhOWVS9cj4=
Subject key identifier: C5:2B:A8:9B:1F:88:63:98:F1:69:85:03:15:B2:CB:42:5D:AD:A8:70
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 0197B96B2023CC1E88C8F5FA3B97632FE2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 02:01:34 +0000
Manifest this update: Sun 29 Jun 2025 02:01:34 +0000
Manifest next update: Mon 30 Jun 2025 02:01:34 +0000
Files and hashes: 1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: CrQtoEtstAbFjT0yvx/AShObr7trxniIO7a06eKM4C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:20:23:cc:1e:88:c8:f5:fa:3b:97:63:2f:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Jun 29 02:01:34 2025 GMT
Not After : Jun 30 02:01:34 2025 GMT
Subject: CN=c52ba89b1f886398f169850315b2cb425dada870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:75:54:64:38:d7:e9:3c:6d:9e:46:e2:28:
b2:4f:8b:04:30:4c:ac:98:b4:77:50:57:72:56:e3:
28:ba:10:54:4c:ca:ee:0c:94:a7:3a:7d:34:24:c7:
45:ca:39:0b:aa:1b:ee:e2:89:aa:e4:3e:72:3d:b1:
fa:3c:63:c1:0f:04:bb:0e:dc:17:08:ac:6c:24:72:
04:9a:c2:bc:c1:bc:fa:b7:ba:9e:b3:9c:5d:4c:c0:
fe:0c:c2:15:cc:fb:88:97:1b:96:a9:ef:77:24:95:
77:69:f9:32:2b:46:92:cc:65:ed:fe:7a:e1:b0:2a:
ab:5a:f6:9e:2d:9b:bb:0b:91:09:f3:59:be:be:9c:
0f:a4:95:b4:e4:fb:4e:2a:a5:c7:8e:67:9b:51:45:
2d:6b:6b:e7:5b:f1:ef:76:96:5b:04:19:8c:b0:09:
49:03:78:62:85:a5:2e:2a:3e:49:00:98:a0:51:3a:
76:cf:79:7d:5c:5e:2b:96:3e:fa:d2:81:9e:ff:a3:
b1:06:02:e8:0c:c8:4c:9b:58:b5:5f:fd:11:4f:df:
f6:da:93:15:51:31:d4:3a:e9:31:08:09:5a:37:0e:
54:ac:37:75:5c:4c:d5:76:a4:a1:d0:f6:1e:b7:83:
09:cf:61:82:ba:4e:71:76:77:ed:99:47:12:b0:a5:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:A8:9B:1F:88:63:98:F1:69:85:03:15:B2:CB:42:5D:AD:A8:70
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:2d:7a:24:a9:d7:19:24:94:d3:af:b5:98:33:00:59:47:
a9:c2:83:89:e2:48:51:64:f0:c5:18:37:1b:65:22:76:1a:c4:
45:05:e6:ce:de:7f:86:59:4b:b8:4d:c3:e2:c6:71:fc:10:ac:
32:b5:39:f3:db:94:58:43:0d:ac:97:9a:af:7c:37:eb:3e:55:
1e:7e:2f:01:d6:c1:79:5b:35:3e:8a:43:8e:6a:2b:40:c5:53:
cd:67:d1:76:16:63:23:5d:27:8d:8e:cf:ba:4f:d3:bb:7d:e3:
bb:65:a1:20:71:1c:5c:a1:4e:d3:81:39:61:38:76:0a:8a:fd:
ce:b3:7d:f1:1a:a6:e2:b9:bc:33:ea:d2:f5:d8:35:5f:b1:e7:
d2:08:40:2d:ca:a8:02:b9:a9:a0:fb:94:fa:ec:38:2f:e3:82:
2c:fd:f0:46:37:ec:52:c4:b9:47:c8:c1:b0:30:50:70:10:ba:
d4:9b:12:94:d3:3f:19:a4:b8:bd:da:e5:82:22:b5:41:00:9a:
06:1f:56:78:7f:28:4e:ba:30:20:13:97:aa:fe:08:fd:a0:63:
dc:b0:5e:03:02:e3:33:e1:eb:20:52:1c:91:fd:4b:8d:ec:b8:
34:d5:cc:b7:1d:3a:9e:98:42:ff:d6:b9:7d:0a:a8:c0:6c:2e:
0f:17:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:49 2025 by rpki-client