Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File: jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier: HSquyxEPNGjIjqxLdscw1Lq5VAsPbSofSSgBoA4sihg=
Subject key identifier: 58:E7:1F:D5:C6:F2:23:AC:8C:A7:22:F7:0E:06:FF:2A:B3:26:EC:54
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 0197C5A5CE03F47280E885D8E01D0C3D58CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number: 0682
Signing time: Tue 01 Jul 2025 11:01:07 +0000
Manifest this update: Tue 01 Jul 2025 11:01:07 +0000
Manifest next update: Wed 02 Jul 2025 11:01:07 +0000
Files and hashes: 1: 1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa (hash: YcdvazhIm7zqYM8zJdIALjmfMmrTX/mjzf4LOtTALFE=)
2: PeHEDW_rP1JUEqYPKxq3ZE0-zH4.roa (hash: m2+wZp8wzsLpKqeRZNklpBnfCK4breDaWRdrgO3+3ys=)
3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: LtrBdPFeetq83OUo/x8EUix3QGYL2ulaAmxg3Pb/k3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:ce:03:f4:72:80:e8:85:d8:e0:1d:0c:3d:58:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Jul 1 11:01:07 2025 GMT
Not After : Jul 2 11:01:07 2025 GMT
Subject: CN=58e71fd5c6f223ac8ca722f70e06ff2ab326ec54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:3d:61:9e:9d:a9:22:7d:c4:4a:cb:a5:05:
7f:6e:64:32:3d:8c:a1:aa:35:3e:fb:0c:d9:21:ed:
44:55:b0:b2:71:7a:6e:5c:fb:d2:be:77:51:90:bd:
35:9c:d0:b9:6c:b4:88:49:bc:a6:dc:54:5d:34:79:
1c:33:e0:50:80:af:d2:4d:be:3e:fd:39:12:c8:13:
b6:81:7c:9f:44:0d:91:d4:99:dd:d3:07:6e:34:67:
04:80:ab:3c:fc:f6:5e:be:ef:44:06:35:85:8a:4b:
09:2c:ad:0c:0f:64:b8:d3:2e:5d:23:b0:40:b6:9d:
9d:cf:1e:93:86:de:5e:09:69:87:6a:1e:4a:6a:cd:
6f:0c:34:a4:cf:5d:a0:77:31:2c:a9:58:c1:bd:08:
74:7e:b5:2f:9b:29:7c:b8:f4:ea:cb:76:c5:25:0f:
fa:3a:d4:6f:01:99:db:65:29:a0:d3:32:db:12:94:
ab:0a:4e:04:b9:31:98:b7:71:40:cd:ba:80:6e:71:
7c:40:67:d2:33:de:53:02:aa:aa:8f:37:ba:82:5b:
f7:4d:6d:64:a4:47:bd:c9:23:41:af:de:a7:c3:40:
b8:85:89:53:a0:df:49:c1:f0:30:d3:24:a9:02:fe:
02:3c:b2:c1:a4:c0:0a:54:aa:c1:a0:dc:4f:95:fb:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:1F:D5:C6:F2:23:AC:8C:A7:22:F7:0E:06:FF:2A:B3:26:EC:54
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:30:63:73:48:5d:44:1d:94:29:3f:76:d8:56:bb:16:06:34:
9f:3a:66:51:95:f6:3c:60:fc:6b:8f:b4:84:73:bc:3b:40:5f:
7e:51:70:8c:96:1b:d7:f2:58:71:6d:c4:97:51:96:6b:c4:2b:
16:59:28:5d:d6:59:33:52:1b:c9:5f:88:2d:a9:3f:6b:af:97:
80:3e:d6:48:15:18:62:1c:87:ea:cf:fc:32:81:b6:5c:66:ce:
30:51:54:07:14:36:d8:45:f4:bb:32:3a:14:7b:6c:eb:20:10:
e3:bf:62:6e:f8:d5:86:40:4a:ba:1d:b7:db:f5:f6:e8:b4:ad:
6c:8e:c9:43:4e:d9:7f:61:c3:1b:2e:aa:ad:81:1f:9c:c6:73:
61:f0:7e:1b:b6:11:99:b3:75:53:22:ba:a3:55:10:74:ae:8f:
2d:7b:11:84:f9:19:e3:84:ed:33:80:cf:dc:a9:d0:bf:36:5a:
3b:63:88:56:27:25:20:5a:5d:a2:45:70:4d:1c:a6:55:cc:ba:
93:c8:a1:50:2a:b6:ee:5a:8c:11:a0:d7:17:e5:ae:13:28:f9:
7d:1c:9d:83:dd:4f:db:b0:46:b2:50:86:4f:c6:16:c4:f4:45:
7a:9b:d2:cd:d1:c4:60:8f:cc:dd:c8:a9:1e:eb:be:19:dc:68:
c3:7c:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:27 2025 by rpki-client