Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: 9wMCeeGrpsGP0AbuOUvkXz3nkLdLOqZiRfNljTiyVvc=
Subject key identifier: C5:1F:EE:E7:97:39:AC:F4:FB:51:D1:16:EF:7A:BF:A9:DF:F8:38:E2
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 0197B82119C2ACEE3F40046A29D1CB8AF359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 1373
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: R1bhvcMAyRdSBUy3ik9iukxGo2XCETuDeeUzBzxzc1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:19:c2:ac:ee:3f:40:04:6a:29:d1:cb:8a:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=c51feee79739acf4fb51d116ef7abfa9dff838e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:1c:7e:ab:3c:0e:67:62:da:2b:e3:36:94:
9d:33:58:de:8d:11:00:34:ad:37:09:a3:b4:4f:79:
65:2a:a2:32:90:16:5a:53:29:a3:de:11:48:d9:ba:
0e:bb:e6:0c:08:47:84:01:b2:bb:61:83:b1:58:c3:
eb:e5:5b:9b:5f:81:c2:ca:1b:c8:da:8c:f1:d2:c6:
96:e4:ae:9f:ae:e9:86:ee:fc:35:d5:b9:54:71:48:
42:5f:60:e5:ef:f7:33:43:2c:1a:bb:1a:40:b0:25:
a1:26:e3:c4:26:6e:3b:d6:8c:56:00:4f:57:0e:73:
b9:ba:2c:24:c7:4c:10:50:92:4e:53:5a:99:03:fa:
15:ef:44:71:ef:1b:3e:49:12:70:a1:f4:5c:ba:b7:
58:49:e1:36:1e:19:0e:08:3c:35:bb:59:33:62:7c:
8b:0c:64:e1:7a:0b:cc:dd:f8:2a:1b:ac:77:c7:e4:
35:41:03:ca:9d:20:04:b8:83:c2:20:32:7d:12:8d:
08:eb:03:f5:95:e2:26:35:d9:6d:c3:df:dd:a5:7c:
8a:9e:16:3f:a9:14:4f:67:81:f5:a5:f2:c2:b9:6d:
68:96:95:e8:b7:4b:80:8d:da:62:46:a9:04:6f:09:
38:65:39:eb:0e:6f:09:73:a3:dc:f8:81:6d:bb:0a:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:EE:E7:97:39:AC:F4:FB:51:D1:16:EF:7A:BF:A9:DF:F8:38:E2
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:6a:ca:7e:2b:e0:36:1c:3c:67:ff:28:73:42:22:3f:a6:
36:74:c5:f6:2d:ae:fe:83:8c:8e:5b:66:c5:89:fa:25:63:c1:
b3:85:9e:a5:4b:32:72:48:51:34:7b:d5:f1:e3:25:fa:87:2b:
38:83:cb:4e:73:a2:0d:d1:c5:1b:26:59:77:8f:54:2b:ec:b0:
18:22:00:37:59:75:5b:b0:5f:2b:9a:64:11:39:df:fb:ae:8c:
0c:5d:84:1a:d3:13:2c:92:ac:8c:45:29:a1:bd:c6:75:27:90:
64:34:d4:9f:f4:9f:ee:83:eb:9f:a1:b2:d7:80:5b:5d:75:b6:
de:64:66:a8:a8:46:dc:9d:26:c6:b4:19:6e:54:2d:00:f5:a9:
97:f0:df:be:30:61:cb:96:c3:3f:71:71:4b:98:62:a6:22:b1:
fc:1f:3f:03:16:d8:19:9e:45:2e:b4:bf:fe:84:78:9e:dc:0a:
51:4e:3e:97:38:e4:d9:9f:5f:5d:d8:6d:54:68:3c:14:66:00:
64:a4:65:f2:7a:f7:df:8c:de:bc:94:ce:e3:ec:48:76:31:b1:
71:52:ed:74:04:d6:3f:97:b5:ba:62:b1:1c:93:91:5a:44:30:
e1:6e:24:33:a9:92:4b:48:f1:38:ff:d5:75:c3:18:e3:be:e8:
b3:1a:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:26 2025 by rpki-client