Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: 2Uz2OpMpY+Kw8ldQtFV+GZWovSUURHCCzfPVH59ws9s=
Subject key identifier: FE:93:97:96:E3:2E:DD:07:97:4A:32:A0:86:D3:6F:5F:AC:64:3D:C8
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 0197B74559553D70FD8FFB0DA7D18836806E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: GVOjyv2K0vr1B8wlXr18BA7aL7m5lBBdutAgP7JdDhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:59:55:3d:70:fd:8f:fb:0d:a7:d1:88:36:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=fe939796e32edd07974a32a086d36f5fac643dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:00:b0:0f:3b:45:60:2b:4c:5a:cc:9b:d6:
97:02:8d:11:a0:93:01:c7:88:30:ae:2d:2c:ba:e0:
c3:42:81:2c:8b:bd:b6:19:83:c2:ca:ce:b8:79:12:
0a:a8:ae:c1:32:17:97:ea:ca:eb:d5:62:66:cd:43:
95:d7:b8:37:72:39:93:e5:c6:9a:d0:81:46:53:bc:
03:94:16:6b:ba:38:74:f5:d7:11:32:07:46:69:1a:
30:cb:ef:cf:30:26:db:8e:aa:06:78:43:8c:46:dd:
58:0d:1f:11:6f:5f:fd:80:ca:ff:cb:2b:bb:87:41:
95:40:a1:9f:a3:9c:a8:da:cd:5d:66:9a:08:c0:03:
ed:6a:d9:00:85:b8:20:4d:93:f9:73:98:61:d0:81:
74:86:5c:f2:80:db:44:1d:4b:6a:19:95:20:71:b3:
6b:bb:4b:36:d4:9f:0c:d7:bb:60:67:e8:e8:47:95:
9d:43:3e:fa:fa:58:82:a2:26:2e:5e:d0:4e:67:1d:
e8:ac:5c:46:00:24:7f:7b:b3:0e:6c:f6:09:4e:3c:
4e:a5:98:fc:98:46:36:25:4e:b1:20:b9:ab:b6:7c:
7a:85:e2:68:6f:29:85:79:bc:40:15:78:38:94:03:
d0:f8:08:ad:a3:aa:1b:c3:8c:40:49:09:b8:13:e4:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:93:97:96:E3:2E:DD:07:97:4A:32:A0:86:D3:6F:5F:AC:64:3D:C8
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9b:58:d1:90:a5:71:4d:25:e2:77:6d:46:0f:5e:78:e6:cf:
1b:ed:fb:7a:0b:81:40:01:0a:b4:4c:a1:94:bb:46:c7:06:e1:
61:a7:ae:fc:3a:bd:f5:1a:82:e3:fc:5d:89:aa:9e:ba:ec:d8:
5a:aa:3f:fa:bd:89:17:fb:22:68:2a:a2:5e:d9:05:bc:bb:90:
1d:10:5a:26:a1:83:5d:27:18:bd:d6:0b:0c:a7:94:14:39:14:
bb:24:13:07:0b:18:63:27:7b:ff:8b:c5:ad:ec:b0:89:a8:30:
43:90:71:a1:6b:9b:12:b8:b9:2a:65:68:70:c0:39:df:29:fa:
5c:57:65:15:1e:1e:1a:1b:38:02:6b:d7:2d:e2:9c:da:7b:ed:
cb:58:34:af:bf:72:a8:9a:bf:55:44:7a:2e:94:57:39:e0:a9:
65:6a:9b:8f:bf:01:e4:a1:33:ea:06:a8:04:b0:dd:50:5e:55:
13:3f:b2:9d:25:f9:a1:5d:24:6d:f4:ec:f9:d8:9f:af:51:38:
22:dd:35:79:49:f3:ed:6f:12:c0:c5:fb:62:ad:31:56:e8:2e:
eb:76:bc:3d:d9:cd:11:9b:e6:93:33:8c:79:08:99:dc:0b:6e:
6d:38:98:6d:ef:4b:23:8d:0e:36:90:f2:22:3e:bd:de:db:99:
d2:e6:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:26 2025 by rpki-client