Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: O3MLQQtP3QiYeMuXnUFt/hQJ9z/6ROQVlSADshultSc=
Subject key identifier: 2C:71:AE:88:AE:BD:3E:85:F9:AD:03:86:4D:32:D2:65:D5:FD:76:5D
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 0197B6D7AF5012808FF433CFF172B2948DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: rBxGl1ypFpAedub2FEd7BRln9HnCmtizHN9Uwt9SmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:af:50:12:80:8f:f4:33:cf:f1:72:b2:94:8d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=2c71ae88aebd3e85f9ad03864d32d265d5fd765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:7c:8e:84:8f:ac:95:4a:ed:fa:09:b0:e8:
a9:7d:15:73:e8:6c:7b:1b:63:1c:eb:45:39:c1:04:
02:ca:93:e8:7c:ac:d0:1a:a1:8d:00:75:6c:77:89:
a3:b9:f2:2c:ad:32:06:0c:35:4c:14:b2:02:e8:10:
35:ff:a5:fe:9c:a1:71:02:11:ed:33:54:fe:1a:97:
e0:fb:42:c3:33:22:2a:a4:29:48:fe:71:0a:aa:fb:
60:94:0a:60:2f:2a:d8:d4:c0:6d:ca:c3:a9:b2:cf:
54:4c:0c:2e:e7:e9:39:d6:9e:ad:d7:b9:37:bf:6a:
02:c7:1d:c2:03:5c:59:8c:4a:cd:71:a9:11:be:57:
00:e7:6a:4b:8a:46:c4:5f:5b:ed:5e:00:fe:9a:17:
af:c4:7a:90:57:db:b7:e1:fa:d0:2a:7d:f3:31:97:
da:fa:27:46:7f:30:79:56:c5:2c:05:0c:b1:da:e7:
77:45:3d:42:5e:e2:d9:31:9d:23:dd:cc:41:63:b0:
95:1a:92:24:63:ee:8a:15:32:9b:2a:f0:2c:66:14:
6d:5d:53:63:4a:31:92:70:c4:b4:41:98:b8:06:47:
f4:a5:66:e1:15:c2:0c:01:4b:8c:b4:c1:4b:0a:61:
bc:6b:22:c5:49:ff:e3:a4:2d:b7:c4:9a:09:14:7e:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:AE:88:AE:BD:3E:85:F9:AD:03:86:4D:32:D2:65:D5:FD:76:5D
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3b:71:90:fd:96:f8:de:ae:2f:7b:5e:ac:be:41:39:e9:78:
11:aa:a7:c6:36:34:01:31:31:a4:ed:42:33:5f:32:6b:e3:64:
f3:15:90:f1:e9:b5:12:6f:6e:52:63:e7:f7:42:15:80:59:38:
fe:5c:cf:2c:51:be:d2:48:c2:ba:c7:ac:6a:04:26:c2:0b:ec:
22:2b:71:14:6c:d6:51:51:45:fd:16:03:2f:e8:86:cf:61:70:
c9:e7:44:70:07:76:eb:d5:4f:fc:bd:02:e4:7f:a7:9c:7a:51:
60:cf:54:f5:d2:cf:0f:63:7e:82:7e:96:b1:69:de:45:ba:ba:
0d:2f:1e:7a:49:b4:36:a9:7a:f5:db:1d:49:1d:bd:a4:8e:ba:
b6:31:06:dd:66:80:62:b9:5a:be:d9:51:be:3b:bb:18:dc:c8:
46:18:35:98:95:f3:f2:9c:6f:4a:e8:2b:27:bb:5d:98:8a:f6:
6c:45:0a:9a:b0:f6:b3:a5:2c:cc:77:29:21:8e:18:b5:5e:d8:
fb:b9:8e:85:f2:83:aa:c3:7b:1a:8a:04:5d:5b:e6:d2:e6:d2:
6d:b9:d0:12:b5:95:2d:c2:4a:f3:29:05:36:31:0d:70:85:61:
f5:c6:b9:ee:ae:cd:87:a9:5b:92:af:c6:a3:b0:e5:1d:0f:47:
f6:67:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:06 2025 by rpki-client