Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: ncJ2jquzn+3TOCTEAf1VUPlx1XIHzVeiO776q59NkSY=
Subject key identifier: C6:AF:46:0C:72:37:1B:D0:75:2F:CE:E0:27:BF:3F:E4:48:C7:7C:41
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0197B96AC411471A9FC966C0A1C6FA01E5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 0210
Signing time: Sun 29 Jun 2025 02:01:11 +0000
Manifest this update: Sun 29 Jun 2025 02:01:11 +0000
Manifest next update: Mon 30 Jun 2025 02:01:11 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: l9f424M7izortKGFBErUYWEo0cMAxNTHTw1GzKOckO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c4:11:47:1a:9f:c9:66:c0:a1:c6:fa:01:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Jun 29 02:01:11 2025 GMT
Not After : Jun 30 02:01:11 2025 GMT
Subject: CN=c6af460c72371bd0752fcee027bf3fe448c77c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:03:da:0d:9e:bf:74:60:11:94:73:3e:fe:
6b:b4:ff:6f:ca:b5:93:87:d6:76:29:79:85:38:0e:
09:8b:c5:1a:a6:fa:b4:7d:e1:10:1e:a3:7d:b9:9a:
ca:38:20:f1:43:fb:c5:e4:24:b1:3c:80:b3:f5:7b:
ac:ce:4e:d1:a1:09:53:10:b4:7a:09:98:52:13:c1:
e1:10:f0:a9:2e:07:f3:e0:23:48:bf:e1:db:aa:7d:
a1:10:53:b6:81:08:04:e4:0e:c1:1b:5e:ad:7e:87:
44:4d:c4:57:5c:74:33:98:30:91:22:81:da:b6:93:
67:65:eb:bd:4d:e2:38:4b:77:de:8d:30:43:72:ce:
7d:39:9a:64:e1:37:55:39:25:5f:25:67:fd:f9:6e:
39:c1:83:84:3f:1b:00:0a:d5:21:a5:30:0c:ed:40:
e9:8e:ed:ce:1c:75:be:af:78:19:84:ae:06:97:e2:
07:b0:88:0c:fb:f5:cd:f9:be:cd:93:14:3a:3a:c7:
07:17:a1:21:8f:4f:87:49:b7:08:39:f2:98:9c:a7:
77:e3:2e:87:44:e9:cc:b5:61:ae:46:f5:73:8f:92:
07:fa:e1:8b:fc:e2:4f:2b:3c:4f:6e:4a:9a:9e:92:
a1:fc:ed:c2:b7:0d:1a:36:fd:7e:cf:dd:a1:96:b0:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:46:0C:72:37:1B:D0:75:2F:CE:E0:27:BF:3F:E4:48:C7:7C:41
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2a:4d:b6:8e:63:16:76:3d:e4:51:60:e3:ce:f4:0c:68:41:
3d:84:f8:0c:98:ea:cc:c7:75:73:1f:e1:a9:5b:2f:9f:e9:51:
6d:2d:52:b0:dd:59:51:3d:1f:ed:a0:cd:d2:3a:cc:27:61:16:
85:59:b8:32:45:7d:b5:ff:5d:50:e5:c2:29:ae:87:1c:1b:2e:
9b:d2:be:60:57:1a:b2:dd:23:3f:23:ea:9e:ef:e0:95:90:ef:
71:9d:98:70:44:59:36:33:46:5b:41:86:e5:f6:0e:c0:b0:97:
6a:59:7a:df:e6:6e:ad:e6:60:1a:3b:0b:97:4d:80:3b:cc:6e:
4d:c4:8e:43:2f:2e:cb:2a:2a:6e:52:d7:50:e6:0c:a8:e9:05:
7c:93:53:3f:8d:f8:b2:ce:7f:38:3b:cc:be:b4:5d:68:5c:0a:
32:9e:80:5a:8f:8f:7a:18:ed:9a:5e:37:c5:5d:4f:52:8e:b5:
bb:3a:f4:b1:33:d7:d5:bb:fc:c1:81:1f:e1:c5:9a:4e:b9:18:
81:b2:c8:c6:41:8f:c1:a4:d2:04:dd:6b:32:01:42:64:73:5f:
41:2e:a6:16:e8:a8:65:73:ba:73:97:44:67:6b:99:1d:84:0d:
c0:ec:4b:e7:5d:b8:56:d9:5c:9f:73:07:4d:eb:95:e9:8b:18:
76:ac:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:15 2025 by rpki-client