Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: X2vowmR77lvnGU1anyQHJLWjT8PPA6XxFGx03WdBNBE=
Subject key identifier: B7:E1:EB:A6:31:0F:2E:3C:D9:C7:19:59:39:FA:53:59:A2:07:E1:10
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 0197B96A8E1842F285C92DC9A3E78627C8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 06C5
Signing time: Sun 29 Jun 2025 02:00:57 +0000
Manifest this update: Sun 29 Jun 2025 02:00:57 +0000
Manifest next update: Mon 30 Jun 2025 02:00:57 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: KcWi5WEEiN/AdVzTodrRk44GpRqyBDklVfNnNLifn54=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:8e:18:42:f2:85:c9:2d:c9:a3:e7:86:27:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Jun 29 02:00:57 2025 GMT
Not After : Jun 30 02:00:57 2025 GMT
Subject: CN=b7e1eba6310f2e3cd9c7195939fa5359a207e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:89:ed:50:e6:7d:08:ba:e9:0c:a0:b2:38:
81:18:d1:73:19:ae:5b:e6:b1:ed:b9:bb:26:9c:af:
7a:e0:a8:67:ba:c9:a9:cd:38:14:4b:64:ff:64:31:
91:20:2c:6b:64:73:1e:54:8a:4e:61:0b:4e:cd:d1:
71:73:7c:48:b1:8f:8e:5c:ea:7c:e2:5a:39:c4:98:
b8:4e:97:ba:07:b6:09:53:5c:a6:85:e0:f7:b9:ab:
5e:a9:12:e4:f8:fa:e3:c0:7b:f7:6a:c3:58:e7:31:
4a:07:21:fa:8b:62:0d:d7:d3:d1:38:32:05:a6:8d:
c8:c3:40:f8:65:d8:d4:68:90:b7:be:85:3f:fe:1b:
76:1c:08:15:17:f5:b2:f9:ef:02:84:b0:70:75:73:
4f:4f:8e:ba:cc:d8:ad:42:9a:e4:6d:2c:ed:5c:29:
91:5d:df:45:a4:b6:d5:96:a1:4b:4a:e5:41:e6:c4:
a6:70:e6:d0:1d:6d:d6:1e:2e:dd:28:bb:49:1a:42:
d5:ae:68:4e:d1:12:4b:fd:ff:3c:ad:c3:44:3e:34:
50:07:40:b1:7c:91:a6:67:b2:0f:39:95:fc:64:23:
20:2a:b5:6c:da:86:14:cd:45:cc:69:a1:30:a0:7a:
d3:3d:3c:9b:ed:77:69:59:2d:c5:a6:ad:bf:72:58:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:EB:A6:31:0F:2E:3C:D9:C7:19:59:39:FA:53:59:A2:07:E1:10
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:78:45:ca:6f:d3:d2:ff:48:c9:7d:df:e6:c3:37:9d:d3:d6:
97:6d:b9:58:60:48:e8:ed:27:30:96:db:1e:dc:99:18:1a:c7:
57:65:13:1f:99:cf:51:6e:6b:8c:1e:8e:55:12:b8:50:7e:a0:
59:dc:1e:ed:72:46:74:2a:10:be:b2:3a:88:b9:93:d3:69:84:
28:67:23:4d:fc:7d:88:35:60:65:d0:69:13:f6:b5:8b:1d:e4:
9a:f1:1c:4e:8d:43:99:0a:c8:44:e6:0f:98:1a:f7:23:6d:90:
bd:ce:c5:58:8f:6b:3d:6c:04:41:c4:2e:4d:29:37:2e:be:c4:
9f:6c:c7:f8:60:b0:eb:70:56:c8:2c:27:9c:8b:a8:12:f3:d1:
f6:1d:2d:37:d1:3b:f6:2d:5d:5e:d1:6e:e4:8b:f3:1f:e7:55:
a0:02:ab:65:9a:c8:39:f2:03:65:d1:cb:10:18:68:6b:87:b3:
6b:7d:3e:e8:32:94:c8:0a:c0:01:f8:c7:86:0d:88:3d:95:a5:
14:ae:15:4f:c2:24:05:eb:d5:56:9d:7b:08:08:f6:05:6d:17:
f5:ca:07:8e:58:9c:c8:ce:3b:57:c4:76:39:ee:2b:be:46:d6:
71:25:58:95:2b:8e:4c:f1:d6:9b:34:42:ab:bf:b9:12:70:c2:
e4:bd:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:25 2025 by rpki-client