Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: p/mM7uO2dP5VRKs2rMR+QX8gbJfVc7BSXKlkzmqj8RQ=
Subject key identifier: BB:A9:D7:7E:D1:6A:7A:1A:7F:46:D6:AF:B2:2C:F8:68:48:24:45:67
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 0197B7EAE022E00DCBC45109B21C89C4E7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 019D
Signing time: Sat 28 Jun 2025 19:01:52 +0000
Manifest this update: Sat 28 Jun 2025 19:01:52 +0000
Manifest next update: Sun 29 Jun 2025 19:01:52 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: LLyz/Mj2eo0bY2HbbdWcPfjpcBIMXIy/+/+WYKPpzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e0:22:e0:0d:cb:c4:51:09:b2:1c:89:c4:e7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Jun 28 19:01:52 2025 GMT
Not After : Jun 29 19:01:52 2025 GMT
Subject: CN=bba9d77ed16a7a1a7f46d6afb22cf86848244567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:bd:1e:d7:4e:35:9c:d5:32:c6:8a:61:fc:
af:c1:a5:66:d8:86:20:63:73:10:f4:71:74:8b:98:
be:42:ad:06:9e:da:cd:65:0e:21:c7:96:9a:b1:25:
46:05:1b:5f:a4:29:ba:b5:cb:3a:e9:3c:81:c8:40:
1c:eb:cf:ed:bd:c6:0f:6a:18:63:4f:59:7b:a1:c6:
1c:86:20:86:66:3a:23:65:a4:b9:58:a4:b9:eb:23:
0c:fa:9d:e1:d1:42:5d:9a:b9:88:33:98:c9:ed:de:
11:29:77:de:6b:6f:cd:94:3a:f8:92:fa:6e:05:29:
3e:c0:3f:28:ca:d2:b2:89:f4:31:a2:42:19:76:cc:
c4:cf:be:1e:8c:22:91:34:4b:24:eb:59:79:e6:7d:
21:39:71:2f:61:07:dc:2b:89:7c:33:5c:e2:e2:d2:
87:79:a3:65:53:04:81:e5:05:91:0c:48:35:ff:70:
20:e0:42:88:22:d8:36:02:a0:2a:b5:2c:df:1f:98:
37:95:3c:d1:d3:91:40:b3:fd:22:c6:60:b8:4d:2a:
8a:20:05:3a:a2:39:d2:7f:7f:df:2c:71:55:1b:8a:
bc:6a:90:7f:05:3b:97:39:a6:90:63:e7:67:80:f8:
66:f7:04:1c:f3:6b:43:ec:9f:82:45:20:a1:17:df:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:D7:7E:D1:6A:7A:1A:7F:46:D6:AF:B2:2C:F8:68:48:24:45:67
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:5b:b0:21:b6:75:e2:9a:71:4a:13:53:b2:51:2d:8e:6f:
ed:f3:75:98:e4:1a:92:58:ac:83:17:bd:08:79:7f:63:11:17:
ee:cf:f0:3d:d2:a2:94:f3:48:42:4c:60:ad:6f:10:31:cc:37:
79:67:a4:5e:1f:ed:ec:03:7a:68:de:08:57:56:d1:c3:65:3e:
ab:d7:71:fc:7d:0d:70:6a:f0:2a:20:59:00:fe:58:35:59:27:
cc:3a:01:62:74:16:e7:71:3c:6c:34:29:3e:f8:85:96:6b:7c:
ec:6d:36:08:a3:59:a0:fd:ea:64:59:ec:d3:bb:0d:8e:e2:1c:
cf:00:ba:79:4c:59:75:b6:e7:21:77:37:d3:0f:d7:45:26:7f:
6a:4a:ab:e7:e7:43:19:44:fb:e1:31:cd:a5:61:26:dd:46:9f:
fc:2d:f6:e5:45:39:2d:eb:04:4d:d9:87:f3:81:07:bf:20:b1:
86:90:34:de:77:71:f8:df:0d:d9:c3:d5:6b:3e:82:ca:9d:1f:
bd:de:4d:b1:6c:07:b9:ab:09:1a:43:59:c9:15:f2:d2:aa:82:
c5:8e:fd:3b:9a:78:61:06:be:86:fe:e8:da:5d:61:45:42:41:
04:10:84:64:39:77:34:d8:37:61:25:2b:2c:29:46:ed:a8:bc:
0a:31:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:43:16 2025 by rpki-client