Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: pyjjQBse107pVQ1oBHbJDu+B+Dnh6OEZaKEp0h3wXUE=
Subject key identifier: 90:64:94:95:54:DA:A1:3C:F2:60:6E:E4:75:E5:98:3D:6B:FC:4F:26
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 0197B88EDF6BA24E6BB76221DBFE39034D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:00 +0000
Manifest this update: Sat 28 Jun 2025 22:01:00 +0000
Manifest next update: Sun 29 Jun 2025 22:01:00 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: 9DjyoBWUeQAU4WbP4zfMm8FgPGSoDLN8cTFrCK/q8CE=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:df:6b:a2:4e:6b:b7:62:21:db:fe:39:03:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Jun 28 22:01:00 2025 GMT
Not After : Jun 29 22:01:00 2025 GMT
Subject: CN=9064949554daa13cf2606ee475e5983d6bfc4f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:a6:11:7a:da:e2:e5:ea:fd:a4:37:88:3d:
fb:dc:b3:16:01:bd:cc:39:64:60:82:f2:c2:bb:93:
26:92:8b:39:14:7c:35:ab:f1:94:3c:80:c7:cc:05:
05:50:eb:be:86:a4:ad:e1:1d:a4:dc:0e:59:2f:4b:
fd:41:b1:6b:75:8b:46:40:f2:f1:9b:04:ed:e5:6c:
e8:24:5b:d0:63:f7:3f:58:42:ce:be:46:c4:14:c9:
b3:90:bd:7c:d7:8d:09:53:77:c9:ca:e0:60:fc:c5:
1b:10:f5:86:16:79:92:e7:3d:e4:8b:2d:8a:6c:99:
42:28:3b:d6:1c:9c:c1:f8:87:c4:78:bf:df:c6:25:
1a:6b:84:52:be:a5:54:64:e2:95:46:b7:81:30:7d:
5a:4b:5a:75:0a:00:08:ca:29:22:90:6d:a7:c3:84:
cc:df:ee:77:49:d7:17:14:71:52:7a:b8:f7:f7:d7:
61:5e:7d:e1:cb:34:6e:4d:9b:67:44:12:c3:bb:f8:
43:52:4c:9f:2f:a1:17:20:a2:50:20:dc:a0:f1:9a:
2e:f2:a0:78:62:60:35:42:84:1b:9c:91:9e:11:aa:
3b:c2:cf:8b:05:e5:68:b4:66:07:6c:6f:65:f8:89:
f1:91:d2:64:c4:b9:01:d5:bf:1d:5a:c1:d0:32:26:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:94:95:54:DA:A1:3C:F2:60:6E:E4:75:E5:98:3D:6B:FC:4F:26
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:cd:b6:be:4b:dd:6f:d5:11:2b:1b:af:41:8a:33:f5:9e:
0c:1b:ae:bd:a9:96:98:bc:0c:e9:f4:57:0f:ab:69:68:24:c1:
02:ec:9e:2d:c6:4f:39:00:18:4c:b8:98:38:2b:2f:55:d2:e9:
63:2d:24:1c:af:05:86:6e:63:fb:2f:1b:b6:c0:32:e5:22:9d:
9c:48:bc:e4:cf:74:42:96:46:fa:15:3e:69:a7:5f:d6:8d:4f:
d3:53:b8:00:76:66:5c:fb:bf:2d:1a:c5:9f:33:40:28:7a:47:
6a:e8:0c:e7:cb:ff:0d:2a:32:fb:c6:9d:53:c3:25:f8:a1:95:
4b:80:0c:5d:5b:7e:40:19:04:00:4f:5a:a9:fb:b0:31:e7:42:
2d:b9:9e:dc:6a:b4:91:8a:24:95:3e:e5:c7:ed:0b:f0:64:76:
23:45:a1:28:ee:fb:25:c6:37:ac:76:3a:3d:21:f8:91:23:b6:
76:cd:50:1f:b8:6a:ae:f7:0c:31:c7:ff:d1:6f:da:4e:5b:0b:
3c:49:84:b1:65:9b:cd:12:c6:cd:5a:39:b7:3c:c7:1d:cd:3c:
5f:bb:39:d6:bf:8e:7d:d5:9e:70:e1:40:e2:7d:c1:11:8f:2c:
8a:ba:e5:3d:db:bd:9d:8a:58:e1:2f:c4:88:cb:04:7b:11:24:
c5:34:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:20 2025 by rpki-client