Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: 9LQ40qIXxwkAD0KtlqgEJf3zb0IcxV9ZcwbvbZYEiQg=
Subject key identifier: AB:84:F4:5C:E5:22:2F:A3:8C:91:D1:2A:96:3C:93:EB:63:3D:DE:2F
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0197B6A22A9E5E7C279A2BB4A3E766723C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 15CD
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
2: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
3: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
4: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: rgizkoT5UfADtKMQksach964E8E8ijJe0jSywcYQtLo=)
5: kWKzlkscB7daOWDY4oKMbQrvmPM.roa (hash: +UujkJtTO/f34wPNB9YifFEZtv6nz6r4CdVLpks93fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2a:9e:5e:7c:27:9a:2b:b4:a3:e7:66:72:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=ab84f45ce5222fa38c91d12a963c93eb633dde2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:54:7b:e4:0a:c5:83:7b:fe:da:d1:06:d4:
91:1f:1d:13:5c:c3:ba:04:a1:b6:c1:93:5f:42:62:
9e:03:44:6b:09:3d:17:27:1a:1f:9a:ac:30:3e:c3:
42:6a:38:e5:9e:d2:ef:a2:51:8b:3c:55:71:a3:58:
46:fb:20:96:2a:6a:2d:7f:54:24:c1:0b:a1:90:a6:
77:92:94:42:01:c2:b0:95:b8:8d:5a:f4:16:84:14:
92:99:c0:13:33:c0:c5:6b:5d:70:be:f9:45:b9:be:
6b:e4:5e:34:52:cf:02:12:57:34:1b:a6:53:10:3e:
6d:18:fa:37:33:f2:cc:5b:45:87:09:e2:54:de:60:
ac:1d:c2:2a:3a:81:cb:d8:91:39:94:b6:f0:c2:59:
b4:ef:1b:22:8e:55:f9:55:ad:62:cf:f8:0c:51:3a:
96:85:c6:8e:27:b4:38:c5:00:c3:67:6c:39:82:d0:
0e:ab:e1:7c:e0:01:db:ad:a8:73:d9:e8:ed:a3:bd:
6c:df:76:b4:c0:c7:a2:c0:37:b9:d1:db:b9:e6:b2:
70:aa:60:a5:f1:49:a1:36:2f:e9:e0:61:5a:10:59:
2c:3c:df:e6:a7:ff:19:bf:e9:5c:fc:2d:54:c6:4d:
ed:7e:37:c6:2f:fa:d3:10:25:d0:c1:c7:74:a0:31:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:84:F4:5C:E5:22:2F:A3:8C:91:D1:2A:96:3C:93:EB:63:3D:DE:2F
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:ca:bc:e7:90:2d:e2:fc:24:19:54:9a:f7:d5:1e:c8:c5:
c1:76:90:09:9c:71:98:c5:14:40:f5:9a:03:37:7e:7c:ad:a0:
30:bf:37:a7:82:e2:9b:7c:38:a5:5a:2b:cf:b9:d9:d6:4c:2d:
39:a0:7a:49:fc:34:35:29:0a:5c:9c:43:23:e3:0c:db:68:ca:
88:25:0a:de:83:86:56:bc:fb:b7:bd:38:d8:97:94:72:99:19:
14:09:01:eb:6b:37:3c:e0:af:78:26:00:24:50:81:61:a7:2f:
8c:22:d4:c7:77:4f:e4:6f:aa:e1:1f:2f:fc:f9:49:bb:46:54:
81:9c:85:c4:ed:63:d5:b2:70:49:10:92:65:51:10:77:d7:38:
58:c3:fd:86:c3:f6:9a:88:20:81:36:83:bc:10:e6:83:8a:72:
c7:4d:c6:db:1e:75:6e:81:16:ae:49:61:f9:0d:02:39:0f:32:
10:07:c3:a2:e6:b9:5d:ca:23:5b:1a:cc:8f:0f:ad:d1:65:de:
f5:1e:22:0e:ee:20:8d:e2:c8:1b:e6:91:66:1d:67:d6:42:5e:
88:49:36:da:3c:bf:55:fe:3e:78:8e:55:90:ab:c4:11:50:2c:
fb:e6:d7:68:36:9b:a9:7c:e3:fd:28:26:17:e4:2d:e6:98:55:
e7:98:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:20 2025 by rpki-client