Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: kpZaeV8ETUWDdhcptJrKox/KjvxOfmrZuNou+RXotEY=
Subject key identifier: 0D:F5:58:FB:4A:8D:27:1A:0C:39:50:93:66:0C:74:82:02:F7:C4:1A
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0197B820E1D9A241322193E462402704105D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 0F9A
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa (hash: 657I1jLunRMhj2vBtHhC7I7kj5ImF6yxkiyRsM9bRks=)
2: P8awl1-FBznnzvpNTr4DRMiIS0I.roa (hash: 7oxXLgK4HMZatOjJ+KQ+qVSvO3gc/0/goIBoaIA0uAQ=)
3: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: hG0Q9SKmxLBEktU3/io7T531U9X2nj3tTsvl9GyOumI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e1:d9:a2:41:32:21:93:e4:62:40:27:04:10:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=0df558fb4a8d271a0c395093660c748202f7c41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:20:f4:72:a1:ef:f4:db:a7:9d:4b:54:97:
47:de:1f:53:9f:37:05:c3:d2:7a:6e:b7:d3:2b:20:
03:5a:d7:a2:e1:bb:88:0e:03:8c:dd:79:0d:e2:d2:
29:ab:ef:32:a9:9c:7f:b2:26:9f:8a:44:7c:e0:c6:
f3:26:65:d4:ec:ed:1b:2b:65:26:3d:8a:11:4d:a3:
d4:88:99:ee:18:2d:82:a6:66:74:ea:38:07:df:81:
a6:e5:55:71:f3:f5:8e:ce:33:b3:7d:57:c7:72:24:
11:b1:21:e6:5e:73:fc:f4:e6:de:0b:6a:f3:27:4f:
7f:e8:2a:0b:46:bc:ec:c6:18:71:ca:21:a5:26:13:
3f:94:e5:94:33:e6:a9:33:b1:4b:e3:5e:96:9e:66:
5d:51:6c:8b:14:99:51:b0:d0:f3:55:74:30:7b:4f:
ea:80:68:7a:53:6b:f8:b6:65:7c:29:37:c2:8c:5c:
9e:10:45:09:8e:40:da:b0:ab:c9:f9:b5:17:02:ce:
56:8e:c7:c7:6d:6e:50:b6:4c:89:82:1d:d7:66:bb:
1b:6e:48:6b:47:c0:bb:ad:8e:5d:8f:36:08:14:b5:
23:51:77:3f:98:a8:c4:ac:fb:c0:38:ce:b2:a8:38:
b2:30:36:74:e5:74:87:67:81:46:98:14:1a:9f:f5:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:58:FB:4A:8D:27:1A:0C:39:50:93:66:0C:74:82:02:F7:C4:1A
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:f9:04:c4:ae:47:2f:62:00:f7:cb:f7:04:6c:ec:e2:78:
ef:44:9b:0b:e9:de:7d:52:83:50:65:74:8c:ac:b6:95:83:55:
05:93:e3:69:e9:07:32:a8:17:8f:20:17:f8:be:0d:6f:46:dc:
03:2f:a1:3e:ba:d9:dd:9e:0e:6e:29:8d:0a:f4:f9:78:be:71:
8b:de:32:66:87:e7:95:64:21:b3:04:14:3f:93:65:09:cb:b2:
ef:7a:79:96:1e:71:d0:bd:7e:89:02:d0:1a:10:fc:e4:de:58:
1c:45:4c:1e:db:c4:0b:f6:9e:60:ed:41:ff:78:ef:ea:33:54:
47:96:6d:ce:78:06:8a:a3:93:f3:31:21:6a:82:2a:a4:a6:9f:
0b:4b:5e:b4:13:0a:d8:ec:fc:0e:3e:bc:e8:45:ef:76:b1:b9:
ea:bd:45:4b:0b:9e:3a:9c:78:ad:d0:55:82:8f:a0:16:5f:ba:
d9:be:24:29:00:79:cb:4f:9a:27:fd:3c:8e:21:f3:07:d1:97:
47:d8:70:d4:e9:9b:07:4e:d0:9c:36:ac:56:50:f2:26:81:cf:
b8:37:24:7c:9b:d0:58:72:9d:3b:36:7e:12:39:ac:3c:34:8b:
ec:30:2f:c7:f2:8f:91:b8:e3:b0:64:22:5d:c9:83:24:63:86:
8f:ad:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:14 2025 by rpki-client