Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: kBrzymmpeTOYb+hHmLMOVgQu95KUWHN3pbTBmha+KuA=
Subject key identifier: D8:12:62:FD:20:85:83:B9:73:45:DB:B2:74:87:5E:E4:B7:7A:D9:63
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0197B820F63CFBB58B4AA26808A848D7993D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1498
Signing time: Sat 28 Jun 2025 20:00:57 +0000
Manifest this update: Sat 28 Jun 2025 20:00:57 +0000
Manifest next update: Sun 29 Jun 2025 20:00:57 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: yNl9gSJrv14MrL/cRC/uG0D0LaUKzRdBN+tPfyIU2+w=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f6:3c:fb:b5:8b:4a:a2:68:08:a8:48:d7:99:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jun 28 20:00:57 2025 GMT
Not After : Jun 29 20:00:57 2025 GMT
Subject: CN=d81262fd208583b97345dbb274875ee4b77ad963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:63:e1:dd:de:51:ab:12:c8:47:b9:03:8b:
56:c8:c6:7f:4a:69:73:7e:8e:66:d7:33:26:15:2d:
25:3c:ab:d0:55:35:ec:00:91:5f:85:ac:f9:36:b6:
92:2d:fb:48:fb:42:14:53:04:ec:42:9b:60:a8:0f:
e4:92:54:96:7a:d1:9b:90:a3:48:9e:2d:34:36:4d:
9a:e2:4a:40:92:69:ee:13:9c:53:c6:70:b6:8d:60:
98:90:c6:40:5c:5d:16:ac:e9:d5:06:a8:47:0d:be:
e3:0c:d6:44:ca:e4:e0:a5:70:f0:b7:b4:ee:1a:0f:
e5:e2:f7:c5:5e:55:f2:5d:0c:20:35:f6:20:a9:14:
5e:01:38:46:d8:03:40:91:0f:05:a1:80:f2:9c:a9:
60:a5:1c:15:cf:5e:da:d4:81:c8:2d:89:a0:ea:48:
f9:d0:64:78:cf:77:f4:64:73:04:6a:6d:31:8a:e4:
16:98:1c:f6:10:60:90:dd:a0:c5:ff:6b:57:1c:6d:
55:c4:b5:b7:62:a3:6e:af:d0:34:2f:23:fb:d4:53:
64:cc:b4:66:02:5e:66:51:b2:96:36:6e:55:da:96:
db:d5:06:5c:4a:a7:ce:8b:22:e4:b8:df:38:49:cd:
53:68:d0:11:75:9c:e7:78:ad:1b:bc:f4:8a:79:24:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:62:FD:20:85:83:B9:73:45:DB:B2:74:87:5E:E4:B7:7A:D9:63
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5e:be:26:c3:79:a4:58:4b:ac:07:04:a2:23:3b:72:3a:f0:
84:b5:3f:fe:f1:f0:02:0e:0b:09:51:42:e4:4e:0f:e6:a2:10:
f0:66:c8:71:de:91:8a:22:da:bc:98:f1:d0:0f:df:71:ce:cc:
06:9e:d3:35:95:78:cb:dd:50:a5:56:f6:51:55:9a:c3:db:2b:
6a:ec:36:ad:1c:21:a6:8c:f0:7a:bb:ea:39:1a:74:33:36:48:
a2:ef:3e:db:d6:33:f7:75:c4:c7:37:5b:4c:bb:fa:d1:ad:70:
60:a2:dd:2d:e9:c3:b5:bb:27:e3:09:e5:1d:0a:de:5c:8c:9f:
3f:76:62:de:90:f5:50:11:c5:a5:a3:84:3d:ed:d7:19:a4:10:
c8:d7:78:20:68:5a:6f:0d:00:65:28:90:0c:63:ab:06:82:4e:
91:d6:1d:73:2f:25:22:8a:1b:36:72:e9:6f:e7:00:eb:31:d3:
a0:a9:6e:24:f4:5a:17:b0:6e:2f:93:1a:a0:ef:10:7c:91:d8:
ba:c1:fc:c2:67:30:fa:06:ef:b2:8f:45:7d:57:b8:0f:90:91:
ca:f9:5c:c7:cf:d2:36:57:76:7e:55:2e:62:9d:a1:f8:98:4b:
f7:8e:20:94:5f:18:79:3a:40:54:98:21:bf:d7:15:cb:c7:5a:
91:c5:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:58 2025 by rpki-client