Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: U87LxQ0oj9gKD5R6oVwGpMOSnx6n7h7zSPaoIaRPHDY=
Subject key identifier: E8:87:9C:D2:27:44:5B:A3:49:5D:E0:89:75:DF:22:DF:EC:C3:97:4D
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 0197B96A93D619FF135CAF17D438ACDC724A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 0842
Signing time: Sun 29 Jun 2025 02:00:58 +0000
Manifest this update: Sun 29 Jun 2025 02:00:58 +0000
Manifest next update: Mon 30 Jun 2025 02:00:58 +0000
Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: peD5MSdObtPB0L7oC7/SKhCztFaQGFdFvghH3hW7Qoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:93:d6:19:ff:13:5c:af:17:d4:38:ac:dc:72:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Jun 29 02:00:58 2025 GMT
Not After : Jun 30 02:00:58 2025 GMT
Subject: CN=e8879cd227445ba3495de08975df22dfecc3974d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:ca:88:19:10:ae:55:2d:ba:77:b9:8c:5c:
e8:3b:5a:44:aa:f5:eb:7e:6f:fb:8e:ff:ac:ca:a5:
47:2e:af:74:b0:9f:68:3e:d0:41:37:f8:a2:ba:d6:
bc:07:a7:32:03:d9:ee:d8:03:db:ef:dd:e4:5b:79:
55:84:69:87:5e:5a:9b:f7:91:2f:ea:ae:8a:c2:6d:
a8:ab:96:83:af:ad:83:e8:f3:96:c1:4b:fa:ce:a8:
5a:49:c6:b2:28:30:82:12:79:a4:4a:de:64:72:15:
90:5c:cf:54:35:3f:f6:ba:c3:0a:13:58:8b:89:d5:
27:1c:96:03:8d:6d:f7:27:42:2d:79:ef:57:5e:f1:
90:ca:70:ff:ac:b1:ed:5e:98:46:fc:a1:30:e5:14:
40:ae:ea:00:24:f3:5d:e6:57:b1:ed:07:b5:0b:1e:
4f:1a:d8:10:0c:5b:30:af:46:f2:8c:e1:6a:8e:5b:
c0:e2:14:f3:0c:6f:ac:de:3d:7d:5e:18:7d:c6:23:
b7:f8:ff:44:3f:54:20:56:0c:67:f7:bf:f8:ec:d9:
04:75:33:30:52:37:bb:81:78:71:aa:39:55:cc:47:
db:e5:6f:d1:88:88:b9:62:e7:e5:76:77:5b:15:1d:
50:42:0d:be:21:16:84:1b:ef:93:01:fb:18:99:71:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:9C:D2:27:44:5B:A3:49:5D:E0:89:75:DF:22:DF:EC:C3:97:4D
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:55:19:8a:bc:78:ad:5b:f0:56:4f:0f:87:e9:9b:bf:63:a0:
88:22:22:a1:ba:23:2f:aa:c0:c4:85:54:28:32:a9:56:b5:d2:
e6:9e:e2:75:ba:2f:92:be:3a:f8:60:fe:26:bc:62:11:2e:de:
bc:f5:1f:a6:67:0c:74:19:82:34:f3:2a:f3:09:92:97:29:fe:
31:b6:94:5c:7a:74:b5:75:5d:7e:b3:d8:0f:1f:82:ca:f6:63:
71:54:8e:dc:a3:41:d4:2c:1f:a0:74:3d:ad:a3:3e:fc:eb:4a:
12:fb:29:5e:1e:3c:a3:98:a4:a6:dc:20:31:ea:5a:99:ae:4e:
eb:38:d2:e6:c5:06:57:60:2f:a9:07:4f:b4:55:22:5a:2b:50:
b2:4c:6a:04:ba:db:66:0d:9b:e7:4e:ba:2f:51:f2:08:cf:09:
d4:3b:d7:cc:67:d9:76:de:bf:4c:3a:0b:32:11:43:f4:7c:a4:
fa:f5:a6:21:7f:5c:70:5f:69:27:5c:2c:89:37:53:ff:92:55:
57:8f:5f:bb:c5:d2:44:ef:08:42:37:f5:db:89:27:a4:30:fa:
64:13:2a:5f:7b:1b:6a:91:93:a1:96:54:46:b8:f5:32:57:51:
ba:2e:a6:b5:d5:90:13:72:e6:d7:3b:8f:83:ac:1d:be:46:77:
44:17:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:54 2025 by rpki-client