Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: 5Ac6p/55zv9lOkuZl+/7JQVX3OhEZipgwnBDsIGr1nQ=
Subject key identifier: CE:F8:97:3E:35:86:F8:37:FB:70:CE:41:05:42:04:5A:9D:09:60:45
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 0197C19252BE2D0A8C987C03D0A03F8CE825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 16:01:21 +0000
Manifest this update: Mon 30 Jun 2025 16:01:21 +0000
Manifest next update: Tue 01 Jul 2025 16:01:21 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: fyt/zFdiYAhgoZdefFdYZjaBB4jcjkb426HOMzyK2XI=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:52:be:2d:0a:8c:98:7c:03:d0:a0:3f:8c:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Jun 30 16:01:21 2025 GMT
Not After : Jul 1 16:01:21 2025 GMT
Subject: CN=cef8973e3586f837fb70ce410542045a9d096045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:91:72:cb:1a:6f:34:be:6a:36:95:28:43:
41:4c:4b:06:69:59:8f:9b:03:6b:66:a3:af:88:b8:
42:60:82:42:0f:3a:90:97:6a:91:27:34:eb:cc:75:
9e:b1:2f:2d:4a:7f:76:67:e9:76:b3:e8:c1:33:16:
79:06:f8:2a:e2:17:34:1c:b3:13:18:e0:24:a4:5a:
8e:a6:81:af:47:1e:02:76:f6:29:55:bb:1c:2b:96:
9b:98:88:8e:ea:0a:c5:82:a8:0a:e0:d9:d5:54:3e:
89:3a:a9:03:d9:48:ca:d7:58:7a:0a:8f:09:34:cd:
27:fe:0b:65:2f:c2:c9:59:0b:48:c2:9c:1e:e2:d2:
74:50:1f:5c:8f:74:13:0d:56:07:99:2b:d1:29:d6:
9c:c3:3a:d0:fb:11:3a:1f:44:fb:9b:6f:08:df:8c:
c1:35:36:6b:06:4a:37:dd:3c:80:ae:86:9e:94:bc:
1f:8a:a7:20:03:ae:18:2d:75:c4:ca:60:35:21:17:
40:2b:27:ac:ef:b7:23:1b:37:d2:4a:c8:9a:76:ad:
3d:98:da:ba:a4:bb:48:34:50:00:4b:fb:fe:7a:a6:
50:25:eb:4f:f1:4b:34:d3:45:aa:86:2e:18:1a:2c:
51:e8:eb:8c:b7:17:3f:2d:3f:da:c0:1b:e7:32:f7:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:97:3E:35:86:F8:37:FB:70:CE:41:05:42:04:5A:9D:09:60:45
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:02:e1:d7:df:0f:5c:dd:77:0a:34:f6:2c:fa:ed:f7:08:
4c:6b:05:da:c5:6f:5b:7d:55:1c:6e:0a:54:24:c5:c6:93:3a:
66:bd:25:68:7f:b8:eb:51:25:1f:3a:a4:43:ec:8a:f3:ba:28:
cf:81:78:f1:da:21:9a:ae:be:b7:50:e5:a0:96:50:55:ca:be:
93:40:cb:a3:68:e1:cb:33:5a:7e:ac:bf:c1:5f:f5:da:44:d2:
5b:ff:3a:ed:21:9e:7f:32:f6:3e:40:f1:76:9d:6d:23:15:6b:
77:62:c0:95:d5:30:7b:f0:49:a4:3d:7a:ad:a6:6a:f7:cd:8a:
75:77:94:2d:c5:fd:7a:8e:30:96:a0:1e:12:4c:d3:65:de:00:
29:97:41:33:02:fe:76:40:24:05:eb:7a:12:ef:bb:61:53:73:
69:ea:62:f2:d0:89:9d:9b:39:be:d1:02:a2:6c:1a:8f:f5:11:
b5:27:07:19:8d:a7:0e:7f:6b:01:a2:17:97:d5:5b:cf:e6:9a:
13:a7:f8:9c:52:ee:f0:16:d3:f6:14:f1:b4:1e:ca:79:22:04:
7c:d2:74:81:58:b2:b3:82:62:ba:f8:4d:bf:9e:d6:a3:1e:9c:
fd:13:81:99:2c:53:14:17:04:0c:c2:8b:06:4c:ff:4c:9c:09:
ba:8a:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:47:56 2025 by rpki-client