Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: fm6txSas/72nnLVlbpt5TPyilbY/6e+/ah4Wxo4F1GQ=
Subject key identifier: D1:EE:2D:45:87:81:08:29:60:71:CF:90:AE:43:13:F8:3F:A8:F4:19
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 0197D029A03EEEC46EA9289EFC3B8AD2948E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0373
Signing time: Thu 03 Jul 2025 12:01:18 +0000
Manifest this update: Thu 03 Jul 2025 12:01:18 +0000
Manifest next update: Fri 04 Jul 2025 12:01:18 +0000
Files and hashes: 1: TelciHh83ohMZLEiglr17mKx9tQ.roa (hash: WRRAn8x5n/KXtMausaPQfYREHYj3cbcPK0dMlkeLq38=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: fm0bwEV5eKGNdytP/Hi7c4d2wtBdKXeF8LoId1FlvB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:29:a0:3e:ee:c4:6e:a9:28:9e:fc:3b:8a:d2:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Jul 3 12:01:18 2025 GMT
Not After : Jul 4 12:01:18 2025 GMT
Subject: CN=d1ee2d45878108296071cf90ae4313f83fa8f419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:2c:60:ef:e5:cc:5a:1a:87:b8:bc:35:28:
46:c7:8b:b8:48:54:2d:ba:3a:f1:a0:b5:4d:42:09:
93:34:6e:1a:53:b1:5f:14:e6:1b:18:e2:70:0b:84:
3d:ca:69:ae:e6:f5:ba:67:5e:e6:b1:bd:b1:3b:fb:
d6:1e:8e:d1:35:9a:e3:93:47:d7:92:d0:01:89:23:
52:e3:eb:c5:40:c4:17:46:58:24:82:f5:ca:69:0c:
a5:55:72:72:42:b8:d3:d5:34:60:8a:b0:24:2e:df:
8b:05:81:f5:3b:91:5c:fb:6a:62:15:22:bf:43:54:
84:86:29:5b:47:df:74:01:d4:c9:8b:4f:72:aa:c5:
f0:cf:9b:9e:db:70:90:5c:14:f9:70:c1:fe:d4:43:
69:ef:27:1b:ba:c2:e3:a0:82:3d:7f:01:33:20:d5:
b5:e2:12:0d:61:9b:44:2b:3f:ed:df:12:51:42:92:
7a:11:ff:9f:05:d8:ca:3a:3a:d6:6b:68:dd:2a:da:
b0:b7:a7:2b:43:7f:b8:a6:10:2c:e9:3e:79:10:80:
88:cd:18:3d:28:eb:b4:b6:5c:4e:05:e2:64:06:06:
98:54:bb:f0:0b:6d:50:4d:57:0d:29:d4:56:ec:4a:
80:62:4f:86:66:8a:0b:89:2e:9f:dc:f9:1a:cf:fb:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:2D:45:87:81:08:29:60:71:CF:90:AE:43:13:F8:3F:A8:F4:19
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c6:d9:52:57:6b:bf:6b:30:62:c8:ed:bb:68:fc:b2:6c:54:
7a:aa:bd:01:ba:2b:15:9a:47:02:e5:c3:1e:b8:d2:a7:c6:44:
5b:c4:e6:d9:11:a6:66:ad:6b:25:86:77:1e:c5:f7:56:60:69:
a1:59:0a:71:fb:df:b2:17:0d:27:fa:35:61:32:08:72:5f:f0:
9c:f3:7c:3d:f4:aa:19:57:e3:90:3e:31:df:06:d0:55:db:fa:
d1:2f:b7:fa:c0:89:73:60:09:c6:85:dc:7a:27:d6:da:59:16:
66:7d:4b:3a:9e:5e:ce:10:3d:14:1b:56:44:f6:92:2a:52:1e:
86:da:b1:da:a8:5e:af:27:cd:57:ba:20:dd:98:9e:04:45:d4:
f0:3f:e4:ec:b7:04:aa:24:e8:31:73:91:05:54:7c:85:5f:c5:
b9:39:3a:5e:6d:7b:70:a0:e3:fb:08:2a:d3:20:18:ac:d4:25:
0c:5b:08:38:bf:66:0f:57:a8:02:9a:29:03:9e:50:7d:1a:27:
8b:05:a0:5d:4c:ae:31:3f:57:88:1d:bf:fb:a2:59:d1:1a:60:
2c:ac:50:ba:3c:f4:fc:d3:33:67:69:73:40:15:bc:16:b9:c9:
0d:5d:5d:14:8c:dc:bf:e8:8d:7c:b7:49:f3:7a:af:9a:6c:8d:
5b:3c:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:35:13 2025 by rpki-client