Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: /g9fhx8vIyBbfALC0aoFskpkYOqeWZVmRiJdAnu/M88=
Subject key identifier: E7:A7:0D:CA:D6:91:6C:68:A7:A7:21:0A:89:E4:80:44:DD:A2:F2:EB
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 0197C6138EFDDCECFAA0029CCAA93BA43533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 10D2
Signing time: Tue 01 Jul 2025 13:00:59 +0000
Manifest this update: Tue 01 Jul 2025 13:00:59 +0000
Manifest next update: Wed 02 Jul 2025 13:00:59 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: hzxEW0Jde0QupjgHKbImnhNjnTpmAX1NWkfyq8TnLpg=)
2: jlfdZHmVvHdz_53apg0OZWLxSVw.roa (hash: jgBY+KV60Sm5+edJ00g2iCkNCnIW/XdZGLc1p19ckko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:8e:fd:dc:ec:fa:a0:02:9c:ca:a9:3b:a4:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Jul 1 13:00:59 2025 GMT
Not After : Jul 2 13:00:59 2025 GMT
Subject: CN=e7a70dcad6916c68a7a7210a89e48044dda2f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:68:2a:65:71:06:87:75:b2:c2:9c:35:8d:
94:54:62:ac:0c:d4:36:b6:51:79:c5:05:67:f8:1b:
b0:5f:18:fa:40:ae:fe:bb:41:af:77:08:eb:0b:61:
fc:d9:d6:7e:39:98:b3:d0:71:0d:d4:0d:40:5e:72:
53:17:62:8f:2b:c4:7f:41:ba:f8:33:65:de:16:51:
9c:b4:87:8b:08:f4:a2:81:19:b9:fc:d4:bc:8b:76:
a4:eb:e6:d5:e8:20:aa:91:1b:c3:53:66:0f:1a:b0:
38:88:36:24:bf:1e:d6:74:08:0b:01:6d:71:a0:92:
58:14:12:7f:1a:7f:51:69:98:3c:e2:3c:99:e7:e1:
1c:15:0b:12:14:63:6f:8a:21:34:ac:36:5c:5c:57:
10:4f:07:16:b5:01:07:de:4d:14:97:1d:84:f0:81:
97:c3:28:d4:23:7b:dc:ca:1d:bb:5f:7a:89:d8:c2:
80:b6:21:63:69:45:35:26:16:ba:fe:65:c6:f0:4f:
c2:89:54:41:de:1d:3f:f0:98:5d:db:d9:eb:93:62:
df:81:99:0b:f9:c8:60:f0:7c:86:6f:7b:e7:25:f6:
f1:9c:b3:d7:e8:78:aa:bb:f9:0a:2c:a8:41:3d:de:
52:ba:fa:4f:03:6a:ee:ed:8c:6d:8b:cd:49:ea:2b:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:0D:CA:D6:91:6C:68:A7:A7:21:0A:89:E4:80:44:DD:A2:F2:EB
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:88:a7:dd:91:2e:c6:06:4e:76:3e:90:c3:6e:ea:e7:0f:e1:
24:6c:03:3f:15:c7:e8:0b:bc:a0:de:03:67:37:25:f9:66:2e:
cc:a1:b4:83:d1:fa:19:3b:5a:c8:b7:de:64:ef:82:01:cc:9c:
89:11:e5:f5:19:29:48:79:3a:dd:74:53:25:37:e9:5a:68:65:
fd:40:f3:80:f5:5b:c4:ae:cb:8f:6c:b2:a6:45:5f:f7:cf:9d:
34:3c:a1:10:28:f3:aa:65:4b:34:5b:6e:f1:c2:98:f9:8d:0d:
76:35:1e:9c:42:d8:96:a4:1d:da:fb:b8:69:0e:67:20:c5:6e:
cc:db:58:e7:4e:5f:a1:56:df:c2:ca:8f:37:b0:6e:4c:09:f8:
9b:e1:96:56:d3:cf:b7:1f:21:73:30:7e:b3:59:59:89:42:4e:
6f:ac:36:7c:ac:cb:5f:57:1d:f1:a0:7d:16:14:ab:b1:c2:56:
9a:6a:90:5f:67:cb:cb:d6:2d:07:4c:6e:86:b5:3b:5d:67:b3:
75:05:86:e5:91:2d:c6:a8:18:53:87:56:d2:78:f8:34:61:b3:
d2:e6:0f:3d:c0:54:37:9e:8d:e3:ff:2d:12:29:22:4d:84:2e:
0d:e7:b5:c0:cb:aa:c3:6f:1f:4d:7b:65:17:38:6b:98:ba:5e:
73:ed:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:38:43 2025 by rpki-client