Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: FPgsX+ea6YzDu/MybpCVReTm7+2MS0eakTQqJ3FcFK8=
Subject key identifier: 61:F6:8D:70:B8:AD:FC:4E:95:9B:90:C0:80:72:52:F9:E5:C6:B8:A3
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 0197B77CDD0F2DC34390F1DF97740B44B333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 07DD
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: p41kA1Nh0MP8aOSFsp9aUjJ3z3dPQ06mje+fOeuSe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:dd:0f:2d:c3:43:90:f1:df:97:74:0b:44:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=61f68d70b8adfc4e959b90c0807252f9e5c6b8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:8e:5c:67:f2:9e:dc:8c:63:d9:fd:ee:0c:
13:67:9d:0a:b7:d9:cc:c2:4a:5e:0d:5a:c8:10:1b:
93:ed:66:37:f3:8e:ef:31:c8:9e:06:99:6f:65:13:
f8:56:96:67:40:21:33:f8:31:ad:3a:9c:f3:94:2b:
92:72:53:f5:5a:95:ef:4c:f9:bb:14:1f:b0:3a:3a:
51:da:0d:05:8e:89:81:a6:fa:18:66:16:4c:58:50:
d3:2f:49:84:78:bc:56:73:cd:63:88:ca:3e:c8:08:
7a:15:52:bb:93:72:d6:67:5d:25:96:db:cb:92:09:
91:05:8d:b9:ce:f4:7c:2c:7f:1e:38:ed:1b:82:47:
39:83:65:85:e9:ad:94:b0:e7:64:61:0d:7c:3a:44:
e6:ac:4d:d7:a2:af:68:dd:1d:f2:ee:11:cf:66:c0:
6d:15:ce:46:f4:6b:41:a8:12:cf:ec:d4:6a:d9:ec:
51:e1:9b:b4:3d:72:18:1f:fd:f8:e6:8b:b4:d0:27:
a9:75:ca:56:36:eb:c3:e7:99:f2:e0:4c:d6:37:c2:
66:81:65:2f:ad:0e:4d:91:73:f3:0a:e4:f9:93:0c:
de:70:a4:aa:c1:de:94:b9:fa:a0:4e:ee:24:36:72:
13:c5:bc:cb:43:d3:48:87:19:ef:a3:c6:6c:ab:5a:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:8D:70:B8:AD:FC:4E:95:9B:90:C0:80:72:52:F9:E5:C6:B8:A3
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bd:64:90:78:54:34:1d:a3:c9:e1:dd:f7:13:71:98:6a:b4:
9b:85:ce:ec:a0:c3:e2:98:29:bb:e8:b9:52:04:07:f3:c5:6b:
5c:f7:f6:58:09:d6:85:61:fd:a4:5e:62:87:af:f1:2f:7e:48:
3c:ae:9f:b7:a2:ca:72:3a:65:ba:68:89:a7:ec:29:3d:71:c8:
96:93:59:b0:4b:64:3c:94:29:e1:a3:01:cc:d6:a5:6b:df:9f:
53:43:b1:da:e5:af:f7:af:2d:1c:9c:08:bd:8e:e9:e0:96:8b:
78:cb:3e:1f:a0:9a:c8:8a:03:85:3f:49:51:17:8a:7d:96:73:
cc:be:fc:cc:b9:17:d1:02:d1:32:a2:66:64:9f:73:ad:5b:a8:
fa:8b:24:ac:c7:c3:80:5d:8e:85:ba:59:7e:98:9a:38:1c:35:
54:16:62:5c:10:d3:23:8c:5c:16:52:4f:33:6e:bd:46:c7:e3:
f4:6d:e4:0d:75:90:bf:0a:41:1c:86:56:1b:b9:24:8a:25:42:
e2:cc:c3:b4:d7:66:99:dd:e3:78:8c:db:a1:2e:24:99:d7:7f:
38:9c:c9:f9:23:41:78:3f:d2:98:78:29:b4:82:a6:1f:70:ef:
92:53:a7:bf:34:31:ec:fb:a3:8f:b6:85:07:cf:a8:b8:90:38:
77:d1:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:09 2025 by rpki-client