Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: YROqT4Pv513uXmm5lpnYMX3mKXvnk//t/tonZSWekjQ=
Subject key identifier: AE:AB:DE:92:4A:EF:CD:C3:7B:61:A8:BC:FE:7A:D1:82:79:DD:6B:0B
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 0197B857AE2138C892BEC4D1766C04464C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 1B
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: 3GJ0bOfekp5L6arp0MI-w_XPimQ.roa (hash: 0lzM9+wo3VrPT3aYhPai/br06U/H49IVoIizC5oG8Xc=)
2: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: mhUyCTLL+zRWuWAWsZ9JWfT1Sr1ys7Z2OaQ7nVTKNeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:ae:21:38:c8:92:be:c4:d1:76:6c:04:46:4c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=aeabde924aefcdc37b61a8bcfe7ad18279dd6b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:7d:1a:7c:a1:65:76:2b:9e:1b:22:d3:43:
98:fd:a3:5a:17:e4:d3:ce:0f:54:d7:58:9e:0e:2a:
f4:8e:53:45:eb:a3:8f:d6:ad:5f:2a:2c:40:9a:6e:
17:91:b3:95:4b:28:3f:f5:8f:09:b3:23:eb:4d:5a:
4f:c2:39:04:ae:d1:5d:be:35:98:88:a1:33:fe:ee:
e5:e1:0b:3b:71:58:2f:05:d3:de:5f:2e:b3:e2:76:
e1:c7:19:3e:4d:2b:d4:33:e1:93:be:76:ee:77:02:
6b:ec:49:b9:88:d2:27:92:fd:64:5f:bb:70:d3:97:
7e:07:44:5b:91:9d:ad:57:87:bb:b8:37:12:eb:21:
86:d9:8f:78:df:cc:83:34:32:4a:f7:12:63:78:ea:
a5:47:4d:2b:3b:16:46:2a:9a:2e:e0:81:6d:4f:97:
40:69:19:f4:e9:71:99:7e:b7:7b:e3:05:a7:18:5b:
4a:ea:bf:2f:19:63:6d:7d:9c:01:0a:4d:2b:6a:99:
cf:b3:b3:0f:a4:fb:6a:23:59:c6:16:0f:2c:19:ca:
de:07:3e:c6:bd:f3:9b:d0:39:c5:a3:ef:2b:67:75:
68:48:82:a3:14:fe:51:fe:c4:4a:5b:36:82:40:6b:
bb:8c:40:ed:f9:d2:5e:62:81:4c:53:60:f5:63:2f:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:DE:92:4A:EF:CD:C3:7B:61:A8:BC:FE:7A:D1:82:79:DD:6B:0B
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a7:da:81:17:af:0f:f6:9a:45:dd:22:68:c7:70:5a:ce:13:
50:22:1f:a5:bb:86:ef:ea:38:85:c9:e9:29:49:24:4b:a0:0d:
25:b2:7f:50:30:00:69:1d:06:19:83:a5:b1:f5:34:d0:69:18:
50:81:43:87:2b:da:f2:9e:a8:ad:ab:bc:18:a2:80:de:95:50:
e3:af:e1:f8:f7:10:28:d7:8f:75:0a:42:9c:b3:df:16:a4:ea:
bd:37:99:2b:d5:8e:57:85:f5:02:c4:4b:23:da:98:42:11:50:
0f:21:f8:91:66:27:15:40:b5:3c:fc:f4:2a:16:fc:47:ed:ce:
bc:6c:bf:27:73:7f:9e:cb:b1:5f:11:b9:bc:94:5b:da:d0:c6:
4c:e9:ce:64:c5:c3:d4:57:e7:df:d0:c8:2c:07:c7:01:7d:36:
73:2b:05:38:bb:b1:6a:75:16:05:87:ea:fb:0a:a3:5e:28:a3:
d8:f1:45:e7:a9:64:98:96:d0:da:e9:cd:b8:c7:21:4c:90:1a:
7a:6f:b1:e8:81:82:fd:f0:f4:bd:13:3c:b4:1b:3b:50:05:6e:
72:c5:42:56:72:a9:f4:33:b4:ec:e4:3d:ed:bf:3f:56:e7:e3:
ce:e8:53:7c:ca:55:8a:59:94:aa:98:72:1b:28:f8:3b:16:7d:
f1:7b:16:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:13 2025 by rpki-client