Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: yhux6X5GbHC4HK6qbsQlmgKIhoEUg/xHqixZ6k338HM=
Subject key identifier: 14:D9:8E:87:BA:6F:BB:63:B4:E8:56:AD:E7:62:8E:DB:2A:3F:D6:9F
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 0197B70F68F6E35CF18D2B65980DFA5A1F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1507
Signing time: Sat 28 Jun 2025 15:02:09 +0000
Manifest this update: Sat 28 Jun 2025 15:02:09 +0000
Manifest next update: Sun 29 Jun 2025 15:02:09 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: ovDEp/4XhYGKfg0QIcJYyW9P18qzDZbaCZGDc7ZQjnA=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:68:f6:e3:5c:f1:8d:2b:65:98:0d:fa:5a:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Jun 28 15:02:09 2025 GMT
Not After : Jun 29 15:02:09 2025 GMT
Subject: CN=14d98e87ba6fbb63b4e856ade7628edb2a3fd69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:24:c8:08:35:5c:09:a1:0c:4f:4a:b8:fc:
da:16:0c:2d:1b:9f:85:c4:09:bf:46:3f:45:c3:00:
9a:a0:77:66:f0:1b:46:68:34:5b:f2:35:eb:ee:3c:
53:69:04:83:95:6f:56:ae:6b:07:23:a6:06:0d:af:
ee:8c:69:5d:d7:28:11:98:b2:a2:be:fc:7e:76:a3:
f0:e8:44:d7:9a:a5:7c:d8:7e:6f:49:03:96:7a:4d:
54:ce:83:c3:2d:c3:1a:57:58:43:e4:30:11:b3:a2:
32:c2:50:50:e6:48:8f:11:ca:7c:d4:91:67:ca:23:
89:8f:a7:6d:23:f5:ee:60:a8:c1:fa:d1:7b:49:62:
a9:f4:61:78:a5:89:74:7e:9b:c0:08:6b:84:b6:d1:
76:fe:46:81:ff:86:9c:f1:a4:c1:00:05:05:50:64:
68:96:56:99:85:a9:80:c6:e5:8a:10:31:4f:0a:49:
3b:f4:da:2d:fe:61:c4:c5:46:ec:a2:72:e0:26:cf:
48:56:70:49:7c:bc:16:ea:e1:3c:1a:fd:31:ad:93:
f9:9f:61:d7:d6:5f:59:33:56:83:12:46:e3:dd:11:
9b:fb:55:74:38:74:13:8f:7b:3e:ea:d8:a2:4a:69:
14:25:7f:3d:f5:79:e1:c0:d5:34:5e:ec:c1:0c:cf:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:8E:87:BA:6F:BB:63:B4:E8:56:AD:E7:62:8E:DB:2A:3F:D6:9F
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:22:0d:ed:29:d2:2c:04:16:62:46:ac:6d:17:a8:87:f0:
ca:ea:b6:fa:6c:aa:40:0d:f8:5c:a3:91:d7:3b:06:e0:82:7c:
d5:a2:33:84:0a:94:b9:49:b3:83:10:3e:73:1d:8d:1d:33:9a:
4e:13:b0:d5:30:66:d4:26:b8:39:ca:92:8a:a1:79:76:b2:65:
0b:86:4f:25:95:ca:f4:46:a2:aa:3d:39:f1:3e:8e:3c:29:65:
4c:1c:5f:29:f0:da:8a:5e:ff:47:ec:37:79:29:0c:41:12:20:
a8:15:62:be:23:48:22:50:5c:01:a7:f9:07:85:e3:d8:d3:a9:
39:fb:27:ae:ae:9f:e0:c6:1d:04:70:d8:1d:65:11:39:68:e7:
7e:9e:7f:bf:9f:99:a9:fc:88:4a:2d:a3:c4:3d:f5:ee:1d:21:
09:fe:2c:9f:3a:75:7e:24:fc:3e:53:ac:9d:6a:8b:72:8d:97:
c0:b4:d8:b1:79:4e:0c:29:59:b8:f4:0c:84:08:8e:2f:30:ad:
b2:e3:fb:94:c1:7e:da:80:3d:01:ee:95:f2:8b:d2:62:be:62:
47:84:7e:7f:81:ee:1d:21:6e:87:f8:17:75:b9:66:44:31:69:
7a:42:1a:ae:84:d7:33:ba:06:43:b7:7b:f0:f0:44:07:11:db:
ce:8a:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:25 2025 by rpki-client