Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File: JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier: a2h18UAMJyxaP+sPmyxK9HY/CIflv9aFTKMXGKE3CH8=
Subject key identifier: FC:E7:22:63:13:91:81:DA:0B:6A:37:D7:81:4B:41:96:4C:AE:7A:DD
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 0197B6D7317078BA7897540C5BCCF875A0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number: 0DAA
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: 5FVcqdXmvF8ThLCqC/kouNi8hot4/X38K/turBLprIQ=)
2: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (hash: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:70:78:ba:78:97:54:0c:5b:cc:f8:75:a0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=fce72263139181da0b6a37d7814b41964cae7add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:f6:5b:2f:fe:f9:da:9a:cb:87:cf:fd:94:
01:87:2e:c7:9f:67:d4:d3:d3:39:9d:05:69:ab:14:
5a:b9:d9:61:87:03:cc:a9:6a:96:66:a6:b5:93:5b:
cd:67:75:07:30:a8:d3:3a:6b:ff:6e:0d:86:94:eb:
7a:15:ce:1e:7f:9b:88:df:6b:f9:71:1d:04:e8:5a:
49:e6:eb:d6:be:ec:6c:61:9e:61:ef:56:4b:a4:fe:
44:be:28:a5:d4:f6:ae:dd:29:d6:4e:64:cb:0b:5f:
74:5e:69:2b:ce:85:57:21:a9:e4:5e:44:f8:f8:0d:
62:5f:54:8f:91:4a:dd:60:76:00:ef:2d:d3:7d:b6:
c3:36:f0:35:3f:c4:2c:25:46:fc:e7:25:24:da:48:
e0:28:c8:c0:07:0f:26:ff:fb:eb:29:03:7a:ee:fe:
6c:02:46:33:0a:8a:5b:9d:c7:72:87:ec:f9:e0:84:
f2:82:c8:aa:64:db:09:ed:d9:0a:1f:d2:5d:95:8b:
80:ff:d3:1f:50:ec:d3:a5:ec:7b:fa:de:fe:58:83:
8c:73:b5:0f:bb:11:f5:99:bf:20:30:b6:a8:39:7d:
41:55:39:7d:bb:4d:15:a5:1f:7a:7b:b7:95:5d:22:
87:bc:9a:6f:bc:eb:c9:e8:d6:4c:58:f3:01:3d:46:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:22:63:13:91:81:DA:0B:6A:37:D7:81:4B:41:96:4C:AE:7A:DD
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7a:45:4a:2c:73:9e:9b:ea:9a:70:e3:a4:03:06:bd:fd:de:
07:ac:75:b9:39:ab:c5:fa:d2:1b:fa:cb:0e:cf:e5:0d:15:40:
91:a3:41:40:67:24:7a:da:f2:f3:21:b6:44:ef:31:f8:ef:dc:
0a:f3:51:af:c8:f4:13:f6:37:b4:9f:24:12:eb:a4:73:c9:08:
83:6e:8d:d8:fe:1d:e6:68:5d:4d:45:7b:07:53:ec:f3:f9:15:
f2:19:6b:aa:29:39:42:86:4d:60:36:76:91:cd:64:6e:15:65:
2e:85:4c:22:e7:9c:e5:5f:5d:bc:53:11:32:91:83:4b:a5:ba:
b8:a4:51:46:37:41:a4:7a:53:7b:c3:58:6f:f5:fe:cf:40:22:
eb:86:79:31:ca:50:8c:b5:47:f3:4b:79:c9:f1:6c:c4:07:79:
d7:f2:b5:f0:d1:09:80:cb:81:db:97:f0:1c:07:9c:b7:13:d8:
00:e6:95:44:4b:2c:f7:7f:73:2a:5e:e8:9f:e7:c2:66:01:fd:
0c:35:ee:76:17:62:cf:bb:2c:7d:fe:01:e5:63:98:9c:b9:ef:
35:d4:76:64:46:9c:b0:32:d1:f9:93:bf:9a:99:2c:09:c6:09:
fb:41:d0:ca:b4:26:0d:1f:bc:3c:0a:bc:01:02:4c:a3:f2:d3:
4a:58:8c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:21 2025 by rpki-client