Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: 2F8Q96anebB4wZdpaPk5YbwyoYMLeVPbJLEAGKKU4xM=
Subject key identifier: AB:68:51:74:BF:40:56:8F:2D:99:88:A9:01:8E:59:ED:B1:A1:9C:58
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 0197BA7F183EC2A1F0B8D4B8C083187B80AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0E78
Signing time: Sun 29 Jun 2025 07:03:00 +0000
Manifest this update: Sun 29 Jun 2025 07:03:00 +0000
Manifest next update: Mon 30 Jun 2025 07:03:00 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: JqyrPW1U8P8tWlqTj1/JNQdi9NWgv91Vacc0Pi4MsEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7f:18:3e:c2:a1:f0:b8:d4:b8:c0:83:18:7b:80:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Jun 29 07:03:00 2025 GMT
Not After : Jun 30 07:03:00 2025 GMT
Subject: CN=ab685174bf40568f2d9988a9018e59edb1a19c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:11:b7:dc:c9:e7:00:38:eb:c8:a6:ac:b3:
fc:32:db:c8:49:eb:61:7f:05:b4:cb:3c:7b:f8:74:
15:db:34:30:2b:28:58:d4:a7:79:f5:e2:1f:6c:6a:
bb:9e:ee:16:e6:5d:71:94:1c:d8:f6:13:14:ab:21:
e4:1e:8a:80:7e:c6:c9:76:ab:20:3c:cd:63:27:ca:
4c:4c:bf:56:bb:d4:4b:a5:59:90:59:34:b1:35:d7:
7c:aa:ca:45:55:57:05:d2:e5:08:02:59:68:3d:02:
f8:f7:dd:27:37:71:19:c1:9e:27:14:76:b4:c4:91:
49:77:3a:25:75:28:45:38:33:7e:f8:30:51:15:e5:
03:eb:15:09:c1:f5:1f:91:27:8d:70:0c:21:d3:55:
aa:42:48:92:e6:aa:bc:da:c2:f8:fc:88:73:55:cc:
87:4c:bb:80:0a:46:53:92:03:0f:b2:bd:66:58:b7:
c9:df:de:bb:4f:05:e7:5d:5f:b4:c2:f4:65:fa:df:
e3:79:2c:81:58:de:a0:a4:e4:f5:8a:74:df:c0:24:
a7:88:74:21:88:6b:10:77:3a:aa:c3:fe:1c:67:c9:
f3:c9:8e:bd:eb:c8:f1:bd:f8:d9:7e:b5:ab:a6:ef:
2e:b2:ca:26:fd:7c:00:6b:7f:15:b4:3e:9f:f4:ba:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:51:74:BF:40:56:8F:2D:99:88:A9:01:8E:59:ED:B1:A1:9C:58
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:55:b4:ee:40:a2:bb:cc:1b:34:c5:c6:81:cb:02:82:cb:25:
1a:1b:e6:32:5f:04:2d:75:04:f7:9a:55:ae:f2:3c:08:13:26:
85:34:e8:2c:a6:e4:4a:3b:bf:13:f3:03:fa:7f:ab:5b:3e:c1:
f2:a4:85:6c:0c:72:55:0a:8d:b1:6c:4c:3a:cb:83:bf:47:16:
4b:e0:14:32:a1:0d:18:e9:de:0b:51:00:da:35:45:db:a2:ae:
9e:ed:3b:29:bf:30:bb:6a:d8:3b:62:0c:2e:1e:6e:ae:30:d3:
a6:28:c6:77:19:b0:b4:f1:3f:02:97:88:3d:45:8b:8f:ec:80:
7e:a4:b8:1e:04:eb:3b:e8:0e:5c:cd:ae:3b:a3:43:63:cd:a1:
9e:95:97:9f:36:76:f3:0c:33:be:20:ba:15:f5:36:11:6c:74:
c0:7e:90:c9:29:66:7e:dd:10:63:af:f7:2e:91:bb:d8:d1:bf:
63:f4:95:ac:4d:e3:45:81:f2:91:e5:95:bd:e8:2b:97:5e:83:
99:4c:1f:eb:b0:3e:76:36:fe:d1:e8:5d:dc:ae:0f:f6:56:1a:
6a:3d:ad:75:5f:f2:cd:82:a6:73:0f:24:52:c4:5c:bf:12:a4:
c1:88:cb:6a:49:f7:1e:70:f6:7f:75:db:b6:0b:fa:dc:1d:b2:
42:db:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:40 2025 by rpki-client