Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File: J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier: Hjr4VhX02yd2H55TpdJ7iTohu9rP3u1bmaCYPT66MI4=
Subject key identifier: A6:6E:90:FF:CB:23:E9:BD:79:3F:A2:55:98:B2:81:35:F5:4F:D6:6D
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial: 0197B820D67A9FF283030F8355DA8352ED15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number: 123B
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=)
2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: 8z0bnW6ZYnpweRsJgMWKTComNz1YB8E3hzo63jAq0g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d6:7a:9f:f2:83:03:0f:83:55:da:83:52:ed:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=a66e90ffcb23e9bd793fa25598b28135f54fd66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:c3:18:05:fb:be:2e:71:a5:56:dd:f1:27:
c7:f2:ba:30:35:61:a1:6f:4d:1e:da:1c:76:4d:0d:
31:1f:eb:32:dd:b2:4a:6c:cc:50:fd:87:95:83:fb:
5b:40:cf:21:ad:b3:67:a1:2b:db:d5:f3:bb:47:f0:
a9:df:ba:3b:6d:70:e4:af:93:59:b8:03:20:f6:49:
a6:3f:35:58:cd:da:1e:ef:31:33:28:8f:d9:03:ab:
8e:67:ce:bf:d8:85:c6:89:7d:ca:8d:05:80:b2:a9:
de:50:e5:17:23:70:2c:20:0c:a7:d5:3d:77:bc:0a:
58:c3:b7:b3:5c:57:81:b1:33:84:22:f9:26:0a:da:
5c:b3:ee:06:1b:67:ea:8d:a9:ee:83:5f:f7:8d:b5:
70:fb:44:92:a3:05:b7:1c:22:8c:91:b2:da:86:57:
52:a6:98:0e:43:86:71:3c:93:1c:a7:6d:be:24:c6:
92:e6:d3:32:ac:f1:6b:59:ad:46:ec:0e:0b:c9:38:
2c:99:cf:33:79:1d:e5:19:8d:a2:08:52:a0:f5:74:
d9:35:5b:79:43:15:eb:1b:48:fe:21:6c:52:bd:52:
83:db:57:a5:06:de:e4:ea:9a:68:63:51:0e:8e:1e:
3e:2c:a9:ee:6e:3a:0e:51:67:a7:42:c5:66:8a:3d:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:90:FF:CB:23:E9:BD:79:3F:A2:55:98:B2:81:35:F5:4F:D6:6D
X509v3 Authority Key Identifier:
keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:93:b3:e4:8c:8d:b1:31:7f:75:ca:21:b9:c7:e8:86:e9:e1:
f2:89:dc:5b:25:09:65:a5:b1:51:6d:80:7e:47:d8:aa:ff:10:
e3:29:9a:7c:52:4e:b5:b5:84:70:33:dc:33:21:67:e8:b3:b3:
71:eb:52:a2:93:8a:66:47:fd:a7:85:bb:c0:97:7b:bd:bb:58:
ee:8a:43:97:c1:2e:20:93:fc:37:b7:5b:c9:01:5d:c4:1c:12:
f3:e0:99:18:26:d2:67:e5:8f:e0:da:d3:05:28:f3:20:fa:f5:
68:84:a2:2d:af:0e:94:ac:e7:46:60:f4:ec:fb:e1:b6:91:98:
3a:24:cc:b1:0c:c7:c3:3d:e8:e4:28:97:63:df:da:8a:00:b0:
b9:35:4b:ef:9d:a8:13:10:e5:ad:bf:f9:c6:9c:c5:d2:a2:7a:
dc:ec:f1:bc:f4:6e:01:67:cc:c1:40:50:91:64:0c:38:55:d5:
05:52:56:8e:9a:4a:16:c0:42:a4:b1:ca:1c:43:1d:c9:9c:bc:
9d:d6:f8:1e:e2:76:91:67:3f:6e:da:00:23:39:db:be:a0:4d:
5c:21:c9:8b:a1:2c:72:14:ee:8a:8a:03:9a:e1:b8:e2:84:97:
40:44:19:e3:60:19:64:97:28:d8:2f:6a:f5:9e:f6:40:85:55:
23:62:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:29 2025 by rpki-client