Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: kneMmYUoBqmwbh7xbstDhqhkyEwEwmiU0GRwUPMKmUY=
Subject key identifier: EF:6A:5D:11:55:EB:42:52:DF:A2:C7:26:81:FC:E5:DA:23:7E:3E:9C
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 0197BA0F38EB48045E2187A361B91C16023B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 05:00:49 +0000
Manifest this update: Sun 29 Jun 2025 05:00:49 +0000
Manifest next update: Mon 30 Jun 2025 05:00:49 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: 1/BzjIswsdMSmocCsxwISXQUwLS1vKga3AK+28CPF8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:38:eb:48:04:5e:21:87:a3:61:b9:1c:16:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Jun 29 05:00:49 2025 GMT
Not After : Jun 30 05:00:49 2025 GMT
Subject: CN=ef6a5d1155eb4252dfa2c72681fce5da237e3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:41:80:15:6c:90:76:8b:53:8f:d8:9a:e4:
88:e7:6f:d2:4a:fc:90:38:c9:d0:0b:55:97:4a:7a:
b4:35:13:d4:c8:28:3e:a3:86:a8:30:15:f8:0b:95:
5b:84:47:4d:2c:11:20:25:40:cf:58:80:2c:6d:37:
c6:cd:f4:b9:18:e5:a4:e0:e6:e5:1f:18:51:1e:64:
f2:a3:7c:ae:7f:50:a2:f1:12:48:f7:00:bb:5a:dc:
f5:52:a0:d4:39:38:af:b7:b4:14:8f:60:7e:3b:96:
12:49:ff:ea:41:7c:8f:1c:2f:44:bc:93:cf:1f:f5:
eb:f2:9d:68:8f:d4:70:84:c9:a0:0b:57:8b:55:aa:
ff:d0:13:5f:d0:0b:1c:0d:8a:1c:ad:f0:9f:bd:57:
3c:cf:3c:34:61:7b:1a:58:2c:b7:cb:1b:d4:b8:30:
d2:b1:88:a0:d6:cb:c6:b9:1f:4a:ba:e6:8c:c3:ba:
3b:89:48:a2:f6:37:6b:74:7d:74:50:b5:02:de:0d:
7e:2a:02:e3:b3:c8:67:16:46:9c:4e:78:10:e1:77:
53:66:ea:c9:8c:9d:9e:48:84:28:d9:f4:ab:ae:e6:
6d:f7:36:53:9e:ad:8b:bc:4f:28:f1:91:38:22:40:
c0:5f:2b:d7:c2:75:28:09:1f:b8:c4:03:38:c5:1d:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:5D:11:55:EB:42:52:DF:A2:C7:26:81:FC:E5:DA:23:7E:3E:9C
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:11:b0:91:d1:54:ad:66:40:ba:a4:24:04:f2:13:56:b0:57:
ec:9d:02:62:e0:c5:7e:55:15:3b:b4:1e:87:9c:2d:30:01:48:
64:66:ca:26:11:47:13:18:95:5b:a9:dd:9a:85:b3:66:56:19:
a0:c9:20:41:f0:29:83:af:e4:47:e0:b6:30:da:dc:3f:cf:08:
fc:04:f7:99:82:d3:4d:e2:0d:6e:9c:a9:61:6e:6f:b5:95:07:
5a:8b:1e:b2:6a:78:b2:86:d0:7d:2c:b6:51:26:ef:27:49:d2:
43:4d:35:02:4b:b7:19:97:88:64:b9:08:d0:61:1c:13:42:a3:
ad:65:7a:14:58:10:22:7c:07:94:e9:10:68:b6:59:05:87:12:
8d:32:c6:47:2a:b4:55:25:01:61:d6:13:e8:69:d2:75:15:0e:
79:5b:63:62:d1:07:19:be:ff:9f:b1:f6:32:23:2a:dd:64:e8:
0e:5a:c4:d3:94:78:21:43:31:4c:3d:63:36:04:64:bf:db:fa:
cd:8c:9a:ed:49:08:9c:f2:eb:49:4c:5e:43:54:8c:b9:c0:df:
07:37:46:5a:57:54:33:33:5e:e2:aa:b5:a3:40:8f:43:15:6a:
43:af:8d:49:f1:0b:3d:20:d7:cd:47:14:17:cc:bb:be:72:93:
3e:7a:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:07 2025 by rpki-client