Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: c9jvKPk90JyH6VT6oxLS9tUIo1BtKXCInGvKMShzV1I=
Subject key identifier: 46:1E:C5:0D:5B:9E:AC:12:FA:DF:21:C4:22:08:8F:D9:0E:E4:E4:89
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0197B88FF811408387B104D226AEAD5EAA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 0EE2
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: B3ScAekqbL3hPUsTx5E6yu2+DJjDMD8Y7vyNVgIJ5GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f8:11:40:83:87:b1:04:d2:26:ae:ad:5e:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=461ec50d5b9eac12fadf21c422088fd90ee4e489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:48:af:49:33:fc:2f:a1:9c:cc:8f:98:fb:17:
78:cc:f5:f2:f5:da:78:c4:69:d7:0e:71:31:89:6d:
dd:4d:1e:7f:85:86:f1:d6:d7:b5:c7:3d:5e:e9:62:
6f:86:4e:78:23:c2:12:a0:db:fc:c8:93:a5:46:8d:
cf:92:4a:25:eb:aa:0c:a5:76:05:0c:31:2a:cb:32:
2e:d7:cd:2c:6b:3f:40:ba:94:4f:7a:d5:a8:6f:1e:
9e:01:46:d9:46:26:94:16:3e:bf:93:e1:11:d6:61:
f6:ef:bf:ab:12:43:e4:f9:7c:11:26:a7:24:a4:36:
9b:2d:1a:85:06:fe:f2:f0:d0:ac:e2:30:f6:11:fe:
ba:f6:5a:ce:93:03:20:f0:53:39:fa:c8:04:f4:88:
59:a6:6a:01:c3:dc:37:51:30:9e:3e:3b:84:a5:ec:
25:d0:7d:7c:c5:ce:62:c8:a5:a0:70:54:f1:0c:d4:
8d:b7:db:a3:1b:b7:d7:cd:03:21:0a:a7:f7:d4:6d:
6a:88:19:33:47:a0:58:a3:35:59:eb:e7:67:b0:d9:
14:c4:99:dc:36:6d:36:4a:73:d9:b3:c0:dd:4e:5f:
9c:64:26:8e:91:25:1f:ff:a0:70:37:c6:8e:56:bc:
b4:1c:d9:69:ec:cc:84:98:2f:da:2f:c0:9e:35:a4:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:C5:0D:5B:9E:AC:12:FA:DF:21:C4:22:08:8F:D9:0E:E4:E4:89
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:21:e1:42:f6:0d:a0:02:51:63:39:36:7a:2c:c7:23:c9:33:
47:f6:40:63:92:39:ed:77:14:cd:63:d4:bc:f4:11:28:c4:db:
94:84:75:90:f7:65:ef:13:3d:b0:c1:ac:28:56:95:8a:75:8e:
36:9e:a7:0d:0b:1b:7c:14:77:2d:7a:61:97:b8:a3:01:37:ea:
cd:78:9b:d4:4b:01:61:ad:01:e5:42:8e:0f:98:9a:60:9d:be:
c0:9f:99:1c:1a:06:63:0d:48:fe:5a:7a:e9:0e:6f:a2:e5:0a:
c3:17:0f:af:73:d0:e8:0a:d6:bd:96:d0:58:69:8a:b9:75:1d:
56:0d:3f:e0:d6:09:45:63:a1:12:ae:b2:82:da:67:92:bd:b8:
f0:a4:19:ac:5e:5b:cb:a0:1e:62:aa:c7:f4:53:38:38:a1:7e:
3a:bd:c4:98:52:1b:c6:69:70:bc:fc:2c:d1:39:a0:ce:d0:58:
34:60:9f:44:76:39:8f:53:f4:fc:46:c1:67:bc:17:2d:00:c0:
8d:ee:3f:51:6b:13:29:0e:f1:29:a5:1e:80:c9:41:f0:19:af:
e6:79:f1:ef:2f:91:f7:ae:07:c7:24:66:0d:9a:df:3b:d4:1a:
5b:87:73:25:8a:9e:68:98:6c:c9:83:c1:79:fa:03:f9:c6:19:
7c:be:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:37 2025 by rpki-client