Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: GScG3rfZnu7fq04pTbFmcV8PGH53qnXYT6HRnOEMsdc=
Subject key identifier: 1D:08:C3:14:8B:C7:0C:FF:25:12:44:A4:D4:17:29:34:D3:6A:6A:A4
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 0197B6D74DA2ECA7CF0F2DF37890263BEDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: 8GP+fxDtT6s130HL5/3GX+oAm7Mfp554x+rkul5+26g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4d:a2:ec:a7:cf:0f:2d:f3:78:90:26:3b:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=1d08c3148bc70cff251244a4d4172934d36a6aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:44:dd:c3:e7:6f:3f:b0:96:13:e5:22:59:
af:15:a1:f0:44:e0:6f:e6:9f:e3:28:fe:9d:12:56:
03:96:bd:45:75:65:6a:0d:77:41:65:79:32:aa:e0:
f0:2d:aa:4f:64:71:aa:d0:fc:e8:8a:08:e2:6a:a2:
3c:da:26:b6:62:66:8c:3c:73:6b:b5:78:f8:8a:6c:
69:92:8a:5d:96:a5:ea:5c:98:82:f3:69:d0:72:36:
44:17:d6:05:4b:b8:4a:05:9e:87:e6:6c:a7:0f:db:
c9:15:2e:16:86:ed:06:50:04:0e:b0:3b:4c:d9:60:
a5:3f:21:0d:0e:4c:40:72:00:84:46:16:a6:ea:2c:
8b:84:89:26:f2:08:a2:00:7d:da:c6:ad:64:e0:8a:
a4:a7:9b:88:4d:22:94:3e:96:e1:46:92:a5:ad:c2:
35:2c:e3:ec:b5:30:bd:f1:ae:9e:bd:2e:3c:a4:a1:
a7:7a:1b:1b:34:95:44:06:6f:63:7d:f5:27:20:ff:
42:f1:7c:ea:43:89:a3:75:f4:8c:3e:2c:fa:8d:37:
e1:1f:5b:41:fb:bb:88:43:53:b5:96:f1:fb:54:ac:
a3:c3:f0:57:57:da:fe:f5:35:aa:3f:f2:24:4f:30:
c0:7e:80:15:98:18:80:a8:70:13:d8:c9:25:38:12:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:C3:14:8B:C7:0C:FF:25:12:44:A4:D4:17:29:34:D3:6A:6A:A4
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:c5:cf:a8:ce:6b:8f:23:d6:20:89:49:f7:30:e1:a6:05:
e1:12:cd:54:b8:0e:6e:ef:dd:5a:64:86:8c:53:6c:01:a0:e2:
aa:85:ed:ad:43:05:de:d3:14:40:5b:3a:a9:8a:14:0d:6a:99:
31:c0:1e:d4:a3:66:b0:b8:ea:c8:3f:0c:f3:aa:93:9b:75:3a:
ae:d4:c4:0e:d8:8f:19:f2:01:df:a6:79:ef:dc:06:37:27:4e:
98:8a:f9:0b:6c:c4:67:3b:56:d7:b0:f2:7e:3b:d9:d0:af:51:
9b:a1:ba:94:d4:16:44:20:d4:12:28:38:86:49:f0:3a:39:40:
9b:5f:a4:77:d0:6b:1e:21:72:bd:0c:33:f4:af:b9:93:83:b3:
9d:c6:7d:44:19:07:0f:c7:d5:72:64:5e:cd:f6:36:27:34:d5:
6a:e2:c6:32:b2:4f:0a:4b:22:a5:47:d6:0f:d0:8d:70:92:48:
f0:5d:5e:8a:5f:9f:89:da:82:3c:e4:d4:b2:e8:9c:b4:b0:6f:
57:02:52:db:83:73:86:8a:12:af:1f:3e:b9:38:c8:15:6c:72:
b4:7a:59:38:ba:c9:90:20:e2:5e:01:2c:3c:c2:bf:c3:10:a2:
64:68:f1:4e:15:67:cc:39:d6:89:5d:d6:07:c9:51:65:00:4d:
83:aa:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:32 2025 by rpki-client