Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: RUsCsSzLawK9Xy+aSAidARcPqA9ndfaCBFbGBTYkqp4=
Subject key identifier: 1F:86:E9:31:D8:67:34:9F:B7:78:FE:FB:B7:20:63:6F:5E:AC:80:62
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 0197BE5B69FA6D59F2B1D9A89CA92FAA1BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 01:02:31 +0000
Manifest this update: Mon 30 Jun 2025 01:02:31 +0000
Manifest next update: Tue 01 Jul 2025 01:02:31 +0000
Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: DXe6cmD2PnUUIMGXLaZJkVwVVxj26miJhDPw+JDEqf4=)
2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=)
3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:5b:69:fa:6d:59:f2:b1:d9:a8:9c:a9:2f:aa:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jun 30 01:02:31 2025 GMT
Not After : Jul 1 01:02:31 2025 GMT
Subject: CN=1f86e931d867349fb778fefbb720636f5eac8062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:5f:68:2a:b5:23:0b:c1:9f:2e:84:1b:0c:
be:d9:16:4b:87:05:68:1b:0c:fd:53:5a:8a:45:f0:
9f:57:84:ca:fe:8a:e4:3d:31:3c:16:8c:80:64:e8:
79:57:70:40:60:1c:e6:eb:9f:03:52:da:c3:ff:32:
37:f7:78:9e:6d:c0:e3:24:5b:fd:a7:af:47:52:bb:
ba:ac:7d:f6:83:59:8d:03:62:b8:fe:f5:3e:0b:67:
ce:f0:d5:b9:58:08:99:72:07:aa:ef:68:7a:9e:31:
5e:17:b9:85:d6:f5:e0:53:e4:db:8f:1f:a3:51:c5:
f3:b0:ea:83:41:3a:1a:33:56:56:d1:28:69:f1:f7:
cd:ce:d6:79:b6:4e:ef:54:c6:88:74:12:85:e1:84:
23:ba:f0:76:e0:47:70:2b:1a:7b:d9:21:86:98:02:
9a:6b:48:ad:06:8e:2d:08:83:20:a6:98:55:ff:c8:
fd:c1:ab:da:56:c7:8a:4a:26:c2:41:c6:7f:b2:fd:
d8:22:5e:e5:7d:ce:61:61:2b:d7:a3:08:4b:ba:90:
b3:40:b7:05:d9:ef:f2:46:06:ff:12:c7:50:39:63:
eb:34:3c:f3:92:6f:16:f6:20:60:71:84:50:8a:ed:
0c:c1:5d:62:d5:b9:c9:f0:71:7b:44:6e:c0:26:fc:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:E9:31:D8:67:34:9F:B7:78:FE:FB:B7:20:63:6F:5E:AC:80:62
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:5b:b4:b4:ed:58:ef:f9:85:54:1d:ef:e8:c5:83:36:b1:
55:bc:a2:34:0b:07:aa:15:9e:22:b4:6b:d6:17:d9:df:76:ae:
fa:57:f5:ff:7d:25:52:82:34:69:1e:5c:d9:b6:96:0e:dd:84:
18:7f:99:eb:b9:7d:6c:d1:76:38:2e:84:8b:6e:b4:28:b7:90:
51:0f:70:6b:5b:3a:c1:34:47:05:99:3c:ac:a0:2a:27:69:9a:
23:d3:73:87:c3:42:6a:a2:f7:85:44:a1:7f:8f:78:1d:0b:35:
10:fc:7f:70:f4:60:69:c7:74:85:13:79:0d:36:23:07:e3:41:
5a:21:da:b8:e4:da:f8:36:b8:36:cd:69:2d:4f:bc:e7:e0:de:
fa:fa:7d:92:db:ab:fc:50:24:da:f7:0f:ec:b3:e5:e1:0f:37:
af:e7:ab:9b:b7:03:21:62:5a:6c:d8:d8:de:fb:bf:58:76:f0:
2f:e6:be:05:a3:98:01:41:d5:d7:2b:3a:de:71:70:bf:fc:e0:
2a:21:af:10:e2:86:49:5d:a5:cd:53:fe:c4:ca:0b:e1:8c:e5:
97:a1:60:66:73:f2:33:8a:34:01:f9:43:36:d4:e2:11:f3:2b:
c3:68:c2:e8:10:01:2b:8f:de:7c:8a:03:51:93:1d:cc:af:a5:
78:fe:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:20:11 2025 by rpki-client