Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: d0y+m2Zle9Aog04c2xbcoqU1ovc819bA595T1onzCaA=
Subject key identifier: C1:B5:A5:74:7F:46:05:D2:F8:1A:E0:20:C0:07:CF:6D:A8:87:7B:E8
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0197C12446B4E7A4D338EE42FAD4B855C589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 15C0
Signing time: Mon 30 Jun 2025 14:01:09 +0000
Manifest this update: Mon 30 Jun 2025 14:01:09 +0000
Manifest next update: Tue 01 Jul 2025 14:01:09 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: LoHv5WwD7PzOWqcXFlsxxftRhEkXhgHKl6mjiaRIst0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:46:b4:e7:a4:d3:38:ee:42:fa:d4:b8:55:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Jun 30 14:01:09 2025 GMT
Not After : Jul 1 14:01:09 2025 GMT
Subject: CN=c1b5a5747f4605d2f81ae020c007cf6da8877be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:ab:e3:ff:99:f5:eb:60:2e:10:de:f3:70:
0f:20:ef:08:c4:5f:af:18:c8:16:75:9e:47:35:d6:
26:55:f0:59:a2:c8:51:88:0c:a4:6f:f3:32:db:9d:
d2:8c:6f:a4:fe:b5:22:2f:8c:eb:8e:01:c1:df:51:
4f:d7:8d:61:54:8c:24:75:66:3a:03:e2:32:4f:ca:
74:4c:76:3d:f2:46:af:32:51:83:0e:e1:a2:18:59:
c3:06:91:6e:0e:5f:fa:20:7a:aa:38:cd:59:50:76:
3e:30:20:4b:78:42:cb:dc:67:11:8b:7f:e6:d7:f2:
47:ae:08:09:bc:94:b5:1a:07:87:7d:51:1f:39:1b:
74:e6:30:d6:a7:a6:7b:f1:ce:e3:1f:de:44:9d:14:
b8:e3:ae:1d:9b:9d:d3:a4:19:81:67:90:79:bc:dd:
7b:1c:78:33:fa:c8:bc:c9:ee:67:ee:bd:0c:4f:6d:
7f:b2:74:03:15:93:64:92:41:44:d4:41:0f:75:01:
6a:5b:02:e1:df:84:c7:3c:d7:59:ad:b0:1e:d4:53:
93:39:66:52:03:ab:3c:f8:0d:04:2e:7c:a2:f5:f4:
65:de:60:3e:98:80:10:d1:4d:d1:1f:3d:ac:43:49:
f8:36:98:87:6e:17:64:16:7e:12:44:9f:82:80:99:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:A5:74:7F:46:05:D2:F8:1A:E0:20:C0:07:CF:6D:A8:87:7B:E8
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:44:6d:6b:e9:f4:d0:ba:f5:b6:6d:d2:aa:e4:f4:70:a5:
89:d2:08:96:ab:7c:5c:92:09:c8:71:48:69:a9:34:4b:ac:b5:
6a:c3:f1:60:a5:76:7c:3d:ac:48:81:41:11:28:5b:84:16:55:
b1:6f:17:96:ee:17:51:01:7d:84:c6:ba:24:cf:3d:a3:17:e1:
c3:f7:c3:d4:c2:a2:68:8c:91:87:85:ea:38:20:c2:e7:56:95:
48:d4:33:75:3f:98:cd:8d:16:10:56:50:45:08:f5:92:01:ec:
bb:e2:ff:f0:40:03:dc:f6:a8:a9:50:d9:32:7c:18:4a:98:e4:
82:c9:89:e6:bf:d5:15:78:98:a5:7f:f3:23:74:0a:2b:48:b7:
52:25:6c:69:e8:da:e9:b1:df:2e:a0:06:0a:fc:4c:3c:9c:74:
5d:3c:9f:31:3d:22:5d:86:b1:91:c0:92:e6:7b:ea:3a:c3:84:
6a:89:89:19:5f:1d:16:ae:19:da:35:eb:e6:af:fd:84:dc:bc:
5a:b1:82:d9:e3:f5:ec:40:66:ea:9c:6e:dd:7d:8e:8b:26:97:
5d:b0:8d:54:c7:cd:00:39:cb:7d:a5:2a:14:0e:1a:0f:a2:61:
30:07:d1:ad:52:c3:74:67:44:23:48:ee:2f:b3:98:83:fc:aa:
28:7d:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:56:57 2025 by rpki-client