Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier: cL9UaKO2kSLNCcveqYfac+AUG+evU9pqWb9wk4f2dAI=
Subject key identifier: C8:C3:D6:37:D1:0E:83:14:ED:DF:8F:5D:8F:BB:72:98:C7:DB:BE:8C
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 0197B6A10F5D7EBE492176D373969E12256D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number: 0D14
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (hash: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=)
2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: VW+5T5NQJX7FWPPptmYQ9SdcyOG7QU2qqqsw2vBxiRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0f:5d:7e:be:49:21:76:d3:73:96:9e:12:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=c8c3d637d10e8314eddf8f5d8fbb7298c7dbbe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:c3:ba:e2:97:0b:a2:d3:b1:db:f6:36:c3:
40:88:4c:78:09:8d:23:6d:fe:b3:78:d6:d8:9e:93:
be:06:a7:73:af:10:36:e9:b0:8a:c5:b4:8a:2a:a2:
ea:12:d0:d8:f1:ea:cd:a9:57:de:81:10:8a:bb:47:
27:9c:85:5b:6e:63:bb:b8:38:7d:a6:c5:09:e1:6a:
5f:7f:5b:02:9b:71:6a:b8:1e:45:63:7f:68:30:9f:
ca:2f:dd:63:3c:9b:46:88:97:e3:82:68:5c:14:ac:
7d:7f:e0:9f:d8:42:cb:59:4a:02:b5:1a:59:96:11:
f7:87:27:14:1b:22:4d:33:84:a6:9f:c4:80:66:49:
c8:14:b9:14:aa:97:7a:86:3b:4f:0f:c0:04:9b:80:
24:0f:fd:38:c0:8d:a1:fa:68:a8:64:7c:00:b5:8c:
96:65:c6:17:24:5a:de:65:d3:cf:71:1a:61:d0:b7:
76:62:4a:fc:3c:a6:f5:84:47:a7:96:18:cf:1c:ac:
94:fc:6d:17:41:df:8d:86:30:7c:dd:3b:31:ce:ab:
f9:0d:ae:36:c1:8d:3d:3e:57:e6:20:93:9c:d2:d2:
47:4b:c5:a9:91:9b:96:0b:ec:63:5e:86:30:3b:f8:
7f:71:86:d9:0f:0d:c9:d0:ad:65:e1:58:58:92:86:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:D6:37:D1:0E:83:14:ED:DF:8F:5D:8F:BB:72:98:C7:DB:BE:8C
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d2:1e:1b:50:11:40:0e:53:c8:7f:e7:d0:60:dc:76:9e:27:
da:3c:ae:bc:e9:e3:91:4b:42:5c:e1:4b:b1:54:24:9e:6d:ed:
2f:90:ac:17:82:84:d0:52:7b:21:cb:69:a6:08:41:e7:a0:b0:
b4:b6:54:63:ad:23:65:31:dd:0c:57:7a:cc:42:27:33:46:14:
27:8f:e5:4c:f4:12:a0:c2:13:41:4b:8a:72:62:81:91:48:33:
cf:24:3a:44:52:2f:ba:65:9f:4a:84:f4:32:63:cd:48:b1:2d:
89:ba:c3:56:cc:3a:5c:1b:77:98:ef:1a:23:f1:24:a5:9c:16:
16:ac:4b:3c:5f:8c:79:de:fe:2f:17:e1:33:22:0b:87:2a:3e:
c1:63:38:d0:50:7b:74:fa:57:98:1b:05:47:a8:54:f6:2f:d9:
2d:fd:a6:6a:db:ff:c4:43:ef:e7:5c:b1:78:c1:a6:13:af:e8:
28:49:88:86:c0:44:2b:fa:2f:f1:4f:35:fb:b4:91:50:34:36:
f7:56:9a:48:cc:77:6a:0b:7a:69:23:36:7e:90:88:7f:8f:e6:
79:1d:b2:0f:dc:59:13:1c:15:22:4b:bf:39:22:a4:0c:6c:21:
36:57:72:17:a7:59:56:e1:1c:28:59:9f:53:ea:df:b1:91:ee:
db:26:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:26 2025 by rpki-client