Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: Ly3WdOVrdqyBwK7mqtohhkIoMXKjwHMcXZjlwTr3LnA=
Subject key identifier: FF:63:8D:1A:19:73:DE:1F:FE:D7:64:0E:07:05:BA:84:7C:28:76:42
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 0197B6A0E4BF0B23D93AA17C787814113B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 0F06
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: +E883sXlv0wIo980ziSYv254l9NH51j+wpanhTdtWYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e4:bf:0b:23:d9:3a:a1:7c:78:78:14:11:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=ff638d1a1973de1ffed7640e0705ba847c287642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:c6:eb:e4:34:84:59:b3:3e:04:14:c5:78:
16:09:fe:f0:03:aa:07:5e:56:6e:45:19:f3:6b:27:
5f:6a:a3:a9:96:f8:87:01:80:19:ef:25:38:b0:fc:
c6:06:13:c1:72:03:bd:bc:da:6a:2c:72:ad:51:be:
45:6c:9e:cf:f3:64:34:6e:57:2e:0a:4d:cd:cc:53:
4c:d7:49:7e:49:2e:d2:6b:a3:ad:7d:5f:7a:57:fa:
61:cd:16:8d:5e:2b:2a:ed:7a:bd:f5:2b:d4:d6:aa:
ae:ca:b4:78:fa:eb:f6:bb:07:15:10:8a:f0:49:57:
75:54:aa:e2:b6:dc:97:22:8c:e2:f3:4e:24:cb:92:
af:ae:5f:66:6e:c9:5c:bc:c6:91:86:e5:ba:2c:f4:
28:76:0a:c8:ec:a5:13:51:d0:1f:a2:be:05:fb:3e:
9f:78:1e:de:34:ba:01:6e:47:2b:fd:0c:10:52:65:
45:c2:18:a7:45:bb:3d:39:f4:cc:39:bd:c0:7b:fa:
98:b1:f7:88:c0:bd:80:e5:01:2b:c0:6e:3a:9b:2c:
93:86:f8:8e:0b:39:f0:c4:02:97:f5:e8:f3:8c:85:
de:3e:bb:7e:be:20:84:63:45:d2:42:1d:24:de:3d:
da:44:d4:4d:7b:42:48:d9:ba:ac:ac:61:c4:f3:cc:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:8D:1A:19:73:DE:1F:FE:D7:64:0E:07:05:BA:84:7C:28:76:42
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:46:72:c7:8a:d3:25:90:07:05:bd:20:6f:79:42:99:c6:99:
f3:75:c0:b1:a7:b0:e1:c0:03:9e:4a:49:be:74:c4:b2:64:af:
e0:50:34:d5:d2:17:4f:fe:62:8d:40:25:17:80:70:b5:2c:af:
2f:de:ef:a3:63:21:f5:b3:86:b9:8b:b4:1d:0f:1c:c4:fd:41:
cd:db:b9:0e:3f:79:cf:bf:85:0a:7f:07:54:1a:86:e1:1a:df:
1f:77:3e:c5:f3:93:44:00:ea:57:c9:c7:04:17:19:05:3c:54:
78:2b:71:0b:19:a3:ec:3d:d0:af:24:21:24:23:91:7a:57:4f:
29:d8:8a:db:a9:a2:ed:4d:b6:55:62:b9:c2:d2:fb:e3:d9:8b:
68:2f:37:89:0c:8f:dd:29:d0:56:8d:39:f8:77:1b:5c:10:e8:
7f:92:8d:a3:30:11:c6:ac:5f:3d:a7:cb:c3:73:3b:a2:94:25:
b7:28:66:b4:7f:84:81:c1:86:b9:cd:c0:4c:5b:1e:6e:25:5c:
49:d2:7d:d7:40:0d:47:17:b1:7d:70:bc:3b:d0:b4:00:ca:cb:
de:aa:37:6b:70:bf:b5:1e:b1:7d:5b:ff:29:c1:1d:c5:fe:c9:
7f:f5:95:67:44:12:49:f8:8f:19:6e:c1:f3:42:b3:0c:cd:3f:
0f:26:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:54 2025 by rpki-client