Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: dw5mxF7FZt8qqFBqbtmwB9JwHwJfcgdGsWSIjK3fuAQ=
Subject key identifier: A9:77:E6:AE:1F:EC:B8:64:14:2D:A6:2B:F5:A1:15:C9:A9:2F:B5:3E
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 0197B74592C1862E3F5199B03E211D70DC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 022B
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: hpSBt7zE2DJ6vi8Bmc7/se3BcWAOV3aCs7A/97V1rkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:92:c1:86:2e:3f:51:99:b0:3e:21:1d:70:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=a977e6ae1fecb864142da62bf5a115c9a92fb53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:14:1b:48:fc:94:41:37:d5:70:24:7a:ea:
c0:27:4e:76:51:ef:8e:15:5a:07:26:2d:d3:65:77:
c6:2a:b6:8e:ac:7b:fc:df:67:3b:c4:9a:45:8d:71:
c4:c0:e0:42:9b:76:da:6d:7b:6c:8f:bf:ea:31:e1:
0c:f7:e2:a1:4b:ab:20:aa:a5:c3:ae:5b:9b:15:b3:
0c:eb:4c:d4:e3:6d:96:14:5a:55:77:7b:da:6b:ca:
42:be:a5:85:8e:21:ed:ff:dd:2d:fa:40:da:e0:3b:
d5:ac:a6:92:2d:d1:1e:6a:55:2e:2d:8f:db:7c:12:
8b:65:a0:ee:5a:c2:bd:64:ee:d9:f3:34:48:65:18:
3d:4d:7a:19:74:68:63:10:2b:b5:46:89:0d:e7:a4:
2b:d1:5e:b6:a7:b0:f4:e7:c8:bd:39:a6:65:a9:2d:
a5:05:d6:98:d3:4b:ad:2d:d7:a9:72:87:36:05:eb:
29:0b:44:0b:63:41:d0:30:85:c0:c7:86:50:d8:7f:
f7:62:15:86:e4:56:5e:ed:b9:b9:0e:6e:69:e4:bf:
58:c9:2b:dd:82:a2:ca:4b:0a:f0:8f:2a:a1:c7:00:
90:66:a9:2d:c2:22:71:b4:30:35:dc:25:ff:5b:bd:
a4:48:0f:75:17:3d:76:2b:65:8b:c1:9b:ae:96:46:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:E6:AE:1F:EC:B8:64:14:2D:A6:2B:F5:A1:15:C9:A9:2F:B5:3E
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:1f:15:5c:32:56:76:6b:89:bc:2e:09:4e:9f:13:a6:1a:
b3:71:b3:a8:67:a4:32:1e:f4:d8:4b:d2:5f:99:fd:f1:3c:48:
00:86:48:76:a2:8d:9a:d7:48:32:f6:cd:09:f5:29:e1:92:25:
3d:4a:f6:df:41:22:2f:12:fa:9e:87:8a:87:01:e2:25:88:53:
e3:20:22:c5:28:a6:d5:a0:f2:54:ef:c9:d8:bf:4e:73:f1:96:
de:51:17:17:79:8e:35:98:cb:ed:aa:8d:d0:64:e3:d7:69:3e:
69:5b:66:cb:06:c6:7e:5c:45:ca:b1:9e:ee:3c:6c:2c:f2:8e:
62:12:17:d2:23:05:34:81:b7:42:a4:3c:98:10:86:b7:7d:75:
de:45:fa:2d:a9:c1:5f:22:70:65:b3:cd:81:e9:c8:65:ac:81:
ed:4e:dd:11:ed:c2:fd:71:87:f8:e0:d3:5e:84:be:ea:7d:86:
bb:dc:89:25:90:2e:bc:a0:0c:d2:32:84:a9:c3:2e:bf:bc:3e:
e9:06:a6:70:82:03:55:fb:e8:11:69:e8:10:01:dd:82:78:1e:
a1:92:5f:61:fe:df:5e:61:93:9a:ab:f5:40:57:6e:2c:96:31:
35:59:26:c8:39:50:6b:09:91:e1:75:da:9c:4e:04:12:b1:1d:
55:09:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:13 2025 by rpki-client