Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: mc3KitwVwBd782OldXcRQfpTMYxrtxbxjV9paEGrcbo=
Subject key identifier: 39:C2:3C:9A:E0:4C:EC:2D:AD:B5:BC:D4:41:B9:EC:88:59:1A:B4:44
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0197B6D7B776C30FC05A51728B8C90540471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0F7D
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: FY9Q0zD/iG8HRu7hXkQMPYr5NmtReSA8qGi14bHyT+M=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b7:76:c3:0f:c0:5a:51:72:8b:8c:90:54:04:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=39c23c9ae04cec2dadb5bcd441b9ec88591ab444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:91:10:fa:eb:ed:54:23:51:4e:f5:a6:90:
06:18:b2:d8:20:5c:93:84:85:ea:ce:39:d8:74:d0:
6a:ea:63:03:91:5d:7d:64:48:1b:9b:00:fe:16:87:
20:24:ed:b7:80:40:5f:87:39:4f:bb:07:31:1a:5a:
6c:a1:93:c1:a6:ec:9a:68:e0:a0:50:1f:42:da:d4:
5f:fe:79:22:db:ee:1f:b4:e5:50:5e:7f:1d:a7:36:
a7:bd:11:ca:0e:55:d7:27:1f:bc:9e:10:1f:39:15:
2d:a5:5d:e2:f8:f7:b3:47:fc:e5:a1:e7:85:d7:93:
9c:68:84:df:f5:b8:a7:6a:d7:76:02:3d:8a:c7:98:
4d:91:e0:9a:1d:4a:45:27:c3:c7:55:81:9a:55:33:
63:5f:1e:19:b9:2f:7c:af:de:04:58:e4:bb:69:8c:
0e:aa:71:db:9a:58:f8:15:75:65:c6:8b:e9:07:58:
90:0e:71:04:47:56:61:cc:86:8f:43:b4:84:47:22:
c6:51:98:7d:bd:82:62:0a:ad:7f:16:a4:44:f4:96:
c9:5b:81:1a:02:82:fc:f9:4d:90:bd:0a:ff:72:77:
1e:5e:42:79:0c:1f:9a:80:06:58:95:10:4c:4c:70:
b4:b7:bd:94:c4:2b:66:dc:e5:36:27:4e:cf:88:72:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:3C:9A:E0:4C:EC:2D:AD:B5:BC:D4:41:B9:EC:88:59:1A:B4:44
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7e:fa:87:ad:55:a1:04:62:83:9f:09:7a:5c:21:be:1d:86:
83:9c:c0:fb:14:6b:5b:96:8e:ab:da:95:12:e8:a6:a6:f0:fb:
43:73:2a:21:38:1f:75:b6:0e:07:b7:13:6a:c3:ae:c5:20:5f:
f1:b7:03:39:41:88:5e:b1:04:e9:f6:4d:41:a7:c9:c6:68:43:
d5:5a:a9:fa:b0:12:e4:cd:2f:3e:d1:cf:0f:09:80:09:9f:30:
3d:6a:59:0c:2d:cb:1b:0a:73:6c:83:a9:b1:65:50:03:84:b5:
c4:ee:43:a4:bb:fc:d2:e2:8e:cf:0a:8b:5c:f6:a4:6b:98:e5:
59:ce:87:e2:fa:37:39:f7:5d:ed:89:b4:fa:0a:8a:09:ac:cf:
29:3f:88:1a:ef:1d:22:43:4c:10:54:20:c6:7a:a0:d0:f4:6a:
7d:3e:08:2f:10:81:c1:c1:7c:12:f1:23:5d:9d:c8:6a:a5:81:
e5:71:cd:44:b1:94:4f:4d:bf:cd:6b:f3:bc:2f:41:c8:85:31:
42:43:37:d2:73:6c:9b:47:c0:57:b6:61:ba:6c:dc:af:28:eb:
b2:81:bd:b9:a0:b5:ea:d6:bc:30:e9:ec:99:76:b9:a6:4a:8e:
0f:d3:25:32:15:c1:81:07:7a:30:ff:aa:66:f0:6d:3d:e8:c1:
83:08:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:28 2025 by rpki-client