Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: lmL4QLmePrw59eQLZFJ2Px66JArh/FRfZ0RbwlsxXzc=
Subject key identifier: 25:37:E0:69:DE:60:EC:77:32:8E:43:85:84:7F:4F:57:45:2A:FC:96
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 0197B77C48C6F3E9FBF782E646290379791E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 0248
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: eOw+IEuYW0m9WNFPCiTN2XcxP7c5je6cO52H4wTnbFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:48:c6:f3:e9:fb:f7:82:e6:46:29:03:79:79:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=2537e069de60ec77328e4385847f4f57452afc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:07:ee:2e:32:39:a3:99:fa:09:8a:bc:f4:
06:04:54:dd:eb:83:4a:10:2f:bf:bd:c3:2f:2c:35:
f8:fe:da:77:c9:39:a4:f8:dd:dd:82:fe:d7:c4:a2:
85:7e:62:dc:98:69:d7:4d:c9:d7:ad:de:c3:66:33:
05:2a:f1:b8:e1:09:76:f5:23:1d:c0:49:b8:59:67:
47:87:96:cc:39:a8:0d:be:70:0c:cc:f3:0d:1b:89:
0b:ce:a8:c7:90:f5:6b:08:3d:9d:d6:49:b3:a1:7f:
20:0b:f5:79:01:c0:d0:8e:da:cf:80:1f:34:9b:c6:
6d:fe:6f:40:ed:89:70:e9:43:27:f6:3d:dd:d9:72:
90:11:e2:c0:29:f3:22:3b:8c:2c:ba:c7:a4:b1:be:
ea:ae:e2:2c:0c:e8:e9:65:18:e0:7c:15:06:cb:0f:
a5:1e:e5:f6:44:16:bd:7e:88:3e:b6:c4:d0:59:b6:
26:c9:f8:fd:fc:5f:38:eb:90:e0:e4:d9:b7:22:34:
f5:de:48:38:a3:1a:5a:3a:8a:30:1c:b5:d2:e4:68:
6c:cc:a0:71:eb:50:bf:c4:0a:3d:19:6f:f5:1a:b7:
29:9a:58:6c:5f:16:bc:f1:c1:36:0f:49:eb:4b:c3:
0f:ea:0d:1b:7f:9b:55:01:ed:10:f5:d0:cf:3c:98:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:E0:69:DE:60:EC:77:32:8E:43:85:84:7F:4F:57:45:2A:FC:96
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:09:77:34:07:cd:a0:26:2f:26:c2:05:59:bd:aa:22:3a:3b:
1c:b6:0f:1e:92:10:b2:03:63:80:a8:d8:4c:f1:48:fe:b1:f7:
3b:c4:55:7b:2c:e1:a9:e1:57:1c:7d:43:71:bc:32:92:6e:61:
57:c6:a6:6e:1e:41:e3:ef:cb:8a:7c:76:88:a9:e6:72:85:a9:
e4:04:39:a3:5a:8d:65:34:d7:0e:95:6f:aa:99:21:41:9b:e1:
b2:1a:dc:0a:7c:41:65:48:bc:d1:a9:d5:d0:1b:82:2f:71:61:
09:bd:66:87:12:ff:a4:9e:8f:6a:64:6c:6d:78:79:52:b3:9b:
f1:1a:b2:8a:48:61:aa:a3:60:48:e4:61:c0:88:85:a5:63:e4:
1e:71:0a:b1:03:d3:e6:1a:fd:90:2c:1a:11:64:90:e9:a2:93:
22:99:df:ad:7c:73:c8:20:35:9c:53:8f:9c:c3:09:cf:a7:88:
a3:47:b4:17:b1:5d:74:44:11:1d:22:4e:95:62:b7:b3:81:30:
26:dd:cd:ff:0f:d0:9d:20:01:0d:90:7d:35:92:94:40:97:bd:
99:f7:54:bf:aa:c0:c2:56:f2:c6:f9:49:7f:53:9e:0f:28:cd:
45:a9:a4:c3:3f:7e:f5:55:d0:3b:16:61:f3:b4:3e:57:cc:67:
99:58:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:41 2025 by rpki-client