Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: 5FYbMSqI7x7jltqIe1eiNBdaNqY3bAJJfjtqrI2SmGs=
Subject key identifier: 77:04:CE:6E:43:40:2D:71:E8:9A:7A:30:18:31:30:0C:06:F1:F1:76
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 0197B6A1A507C7337553EF0F6922F35CE668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: S30ugWAa00O9INrj7b4M4mGaWjyRp/sFiXFYDwxNXyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a5:07:c7:33:75:53:ef:0f:69:22:f3:5c:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=7704ce6e43402d71e89a7a301831300c06f1f176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:bb:2b:eb:03:a7:cb:bb:5b:14:77:54:e0:
a9:09:20:b5:7c:45:4c:2c:ef:5f:e6:5e:4f:02:a6:
0c:ce:6f:72:05:98:e3:fc:34:74:a1:c9:59:d4:60:
56:db:af:ad:6f:7d:35:74:15:c4:4b:13:56:5f:56:
1f:da:c9:f0:53:d3:d1:97:ea:3c:c9:7d:de:09:8a:
10:8c:4c:2b:91:d9:7a:1c:5b:aa:f2:9b:92:7a:7f:
18:02:2f:a9:70:eb:ff:94:34:de:e0:81:a7:44:b8:
77:68:00:31:ef:57:e9:8d:c5:22:c0:88:1b:ca:b2:
d2:55:7a:af:53:48:c7:50:b3:4d:07:3d:67:9b:0f:
9e:c8:00:75:2b:8e:2d:5d:6c:03:35:b2:75:2f:a0:
f4:64:60:6a:ee:df:50:e0:25:de:2f:de:87:87:83:
19:ce:c7:45:bc:81:a9:d2:15:aa:bb:7a:79:dc:0d:
1c:37:50:14:e6:00:27:4b:c5:c7:61:83:90:b6:47:
71:22:27:93:4a:8b:a0:96:00:62:75:84:df:a0:a9:
e5:40:09:6c:17:cc:16:ef:1a:75:26:c7:c9:56:f5:
79:a5:9d:c3:bd:be:77:0a:3e:02:01:b0:71:91:96:
59:50:81:9b:07:68:65:26:c6:36:e5:b8:78:55:64:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:CE:6E:43:40:2D:71:E8:9A:7A:30:18:31:30:0C:06:F1:F1:76
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0d:a3:4b:1d:3b:1c:99:c2:25:48:24:c6:eb:ca:6e:4f:46:
7f:0b:75:71:64:01:4c:bd:f6:6b:43:4f:88:5a:11:80:6c:d1:
63:ef:f2:44:26:4c:e0:e3:b8:00:35:ca:d3:9d:3e:6b:37:bf:
ab:df:34:af:36:22:57:e6:74:59:9c:3d:87:a5:d8:4e:1d:96:
8d:ea:77:4a:05:b2:7d:22:7c:0d:ee:f0:51:f2:7a:5e:eb:58:
fc:51:fa:a0:d8:b5:e7:c4:1f:7c:11:63:1a:88:8e:ff:5e:1c:
74:45:e5:e8:27:76:02:ea:bd:ee:60:a8:7e:a4:e1:0a:bd:bd:
74:8e:d5:79:e3:1a:67:a1:d0:75:ac:ed:5e:ea:f5:3b:01:35:
97:cc:fb:b7:ad:2e:a3:d5:92:56:e1:13:fc:df:87:74:f6:31:
29:a1:aa:85:3a:fe:c1:9a:ef:7e:b9:16:93:a2:65:ea:b3:73:
95:4d:68:0b:d6:ca:09:0b:45:cc:3b:a3:10:ff:42:a4:63:df:
6c:89:68:93:bc:02:31:93:48:3a:d9:9e:e7:54:6a:6e:b6:cf:
53:96:eb:b2:32:d7:a1:87:fc:0c:fb:44:ca:9e:bf:56:b1:ba:
ac:77:28:71:3b:e7:4b:1e:e3:d7:3e:f4:73:f0:88:51:79:12:
4d:3f:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:44 2025 by rpki-client