Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: 2RLLBCiVvscnME1mYdf8BDQMs5dmNThtnJM2aS66ZUU=
Subject key identifier: C5:72:69:0A:ED:2C:EC:3F:65:FA:F5:25:13:43:89:B0:03:5C:6D:9A
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 0197B7456690F51588F4F6B0F475D715B7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: TjUecnMASFsDVgoh/vLkFtvAnRE6VcXH5TcD6OSb/RM=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:66:90:f5:15:88:f4:f6:b0:f4:75:d7:15:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=c572690aed2cec3f65faf525134389b0035c6d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:f6:b3:a7:fe:21:46:bd:0d:95:b6:0f:90:
08:51:ac:17:27:1f:31:92:9c:a0:2e:49:f6:1a:77:
d4:a1:64:9f:a1:6c:a1:1e:24:e9:8d:49:bb:0a:ed:
90:04:a3:34:29:8b:f3:ad:a0:ab:b6:88:f7:4b:1d:
dc:18:33:1f:f3:c6:8b:80:15:79:ee:ed:12:cc:96:
d9:cd:da:ac:b5:a0:fa:89:db:85:04:a3:d4:57:75:
3d:ad:2f:9f:ee:91:a5:0b:71:ae:84:01:e9:52:3e:
7f:50:18:b7:b2:6e:44:84:ce:fa:17:89:12:f2:40:
fb:24:02:b3:c7:5a:08:b6:be:89:a8:41:1c:9f:75:
4c:1c:c9:01:2e:d6:45:2f:d1:75:9b:d8:13:a8:c9:
d5:46:52:2b:59:35:74:4a:1c:94:1c:f2:a5:8e:51:
f9:69:c9:e9:03:fd:51:06:1d:d9:2e:88:b6:b9:3a:
02:59:7e:df:76:a1:fd:0e:4e:84:fb:18:28:52:f6:
33:6d:eb:a4:c4:b3:ac:2c:8e:7f:dd:59:07:48:e2:
de:f1:93:74:9f:0a:ed:65:8f:f3:53:a8:89:46:7a:
60:1e:6c:e8:51:31:d3:34:86:7b:38:18:1f:2f:2b:
d9:f4:9c:c3:6a:63:e5:5d:30:be:f7:f3:03:5f:6b:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:69:0A:ED:2C:EC:3F:65:FA:F5:25:13:43:89:B0:03:5C:6D:9A
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:76:fe:4a:69:e9:39:d5:c7:d1:48:0a:88:4d:99:30:19:a2:
99:29:a8:97:03:c4:4d:54:09:3c:a0:2c:29:e8:64:51:50:57:
69:ca:45:60:1f:9f:33:03:66:e0:8a:d4:9f:cc:d7:46:3e:24:
23:58:97:d0:81:13:26:4a:ec:4b:ce:5e:ce:7e:95:5d:63:6c:
87:66:2e:66:03:06:f5:78:2f:c5:da:65:8d:96:f4:e8:1a:eb:
28:8a:46:01:e1:c0:da:25:84:a9:f6:45:9c:52:78:c7:95:15:
24:55:eb:66:87:2b:fd:44:9c:3f:c0:53:b3:bd:2a:be:a5:96:
f0:21:20:21:2c:e5:bd:2c:e7:38:a2:2c:e6:96:27:47:05:25:
5b:2f:0c:65:e9:03:32:b7:c2:8b:82:13:23:96:04:bc:b3:34:
30:e0:10:b2:37:a5:3e:f5:cc:b7:b4:79:6b:89:53:8c:0d:20:
3c:19:cf:f7:a3:da:d5:fc:18:c6:b4:63:2e:fd:43:30:eb:3b:
42:8a:e2:66:2b:e6:95:78:3f:c8:eb:bd:a6:86:bc:7c:d6:95:
67:1b:c3:a4:85:78:80:5b:67:0e:7f:bb:62:e4:26:ea:c6:6b:
0b:d0:a8:0b:68:73:e9:90:9f:89:b5:d9:0b:ee:5d:c2:74:0f:
61:dc:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:20 2025 by rpki-client