Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: 37aeHpfuPkVMX8ajf/89fgJkVmdkXqu3v8YAeFRXYWU=
Subject key identifier: C8:72:80:FB:40:2A:06:7C:08:1F:2C:56:04:51:57:0B:CB:96:F5:26
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0197B8C5A0A4B3C3959B6D73768CE0B0B339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 147B
Signing time: Sat 28 Jun 2025 23:00:48 +0000
Manifest this update: Sat 28 Jun 2025 23:00:48 +0000
Manifest next update: Sun 29 Jun 2025 23:00:48 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: 3dfe13EBAg2ttZJFulhspJvmILvyItZbDpygZXOwjHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:a0:a4:b3:c3:95:9b:6d:73:76:8c:e0:b0:b3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jun 28 23:00:48 2025 GMT
Not After : Jun 29 23:00:48 2025 GMT
Subject: CN=c87280fb402a067c081f2c560451570bcb96f526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:e8:7b:18:03:01:ec:df:70:89:1b:91:56:
62:d8:70:85:e3:c3:5d:50:9f:3c:2d:b9:9c:92:1a:
ef:c0:a3:90:ea:c3:ec:b3:b5:a1:8a:e8:c5:1c:31:
79:7d:0b:6a:2b:97:8a:90:de:57:8b:f1:87:8d:39:
63:6d:d2:bf:49:e6:9c:8f:d9:9b:de:e0:bc:00:f0:
fa:bc:52:8b:c3:35:61:ee:4f:46:b3:07:9a:33:e4:
64:4c:d2:cb:9e:dd:8d:b0:e4:8c:55:94:b3:3d:21:
82:aa:b5:c5:37:c9:6a:63:58:22:dd:27:46:67:62:
28:95:e6:84:48:26:62:67:f8:e9:0a:a8:ce:92:6d:
05:a3:cd:60:fb:41:2b:6d:4f:dc:64:70:98:d8:b5:
53:39:16:5a:0c:b2:83:c7:5c:fd:2c:3c:98:95:29:
6a:aa:03:fa:d2:e3:51:4e:09:60:9d:9a:be:62:43:
22:20:d0:4c:f9:81:59:e9:ee:b7:47:55:78:2e:ae:
b6:9a:21:40:91:ee:84:d6:d1:88:17:69:b9:2c:08:
45:4d:74:42:77:74:a4:c9:e0:67:ed:77:74:fc:3c:
93:bd:b7:d4:cb:35:e6:33:10:5a:fe:0e:bb:8a:61:
0b:b5:b8:0a:a7:ff:0e:2c:9a:4a:fa:0f:ba:e0:67:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:72:80:FB:40:2A:06:7C:08:1F:2C:56:04:51:57:0B:CB:96:F5:26
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d1:3c:3a:e1:51:9e:d9:4a:45:d9:3f:95:93:09:44:6a:a3:
5d:4a:26:56:ee:61:70:37:7c:25:31:a3:02:c7:99:6e:14:d7:
c5:17:86:5a:ce:a8:09:0c:a9:52:ee:26:92:39:2d:99:5c:b0:
46:9f:ec:fc:fd:28:4b:5f:e5:6a:7c:58:11:99:ae:ea:13:ed:
4f:4d:67:02:60:c3:e3:ef:8e:99:1a:91:ee:c8:c9:98:9b:ed:
2a:2b:e4:6c:a4:e4:50:70:23:fa:4c:0b:4d:14:9a:9d:07:af:
e6:f7:41:0b:17:87:b0:f0:e0:c0:0f:72:14:a3:1f:19:4a:c9:
a1:8f:ff:bd:1c:04:ca:9f:ec:09:52:87:4f:22:56:a8:3a:8c:
b6:49:3c:47:5f:7a:3d:af:b8:e3:32:92:12:36:bb:7e:cd:a5:
38:44:6e:fd:96:1a:b0:49:d9:2b:72:5e:f9:dd:f9:2a:7e:2b:
be:fe:9e:cb:8b:21:f6:a3:df:5f:ee:01:38:b1:97:23:c3:00:
0f:cd:6a:3a:cc:ff:62:64:b6:4b:60:81:b7:af:26:3c:5c:a0:
d6:42:09:2b:19:5f:9b:07:62:c4:fa:de:34:79:8d:33:ed:c5:
0a:10:e5:43:4e:4c:fb:b0:4f:7d:8e:23:91:f2:82:f2:cf:47:
8e:00:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:34 2025 by rpki-client