Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 5qWUT0xlmXUtMqCZMUt+7yT6FIlJ3mbxoMUt/3+qO7g=
Subject key identifier: A1:77:44:E1:9D:B1:E6:29:C0:91:6F:B3:C3:B3:9A:F0:92:33:A2:61
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0197B96B1421CA5835368AF48DFAEA45A62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 01CD
Signing time: Sun 29 Jun 2025 02:01:31 +0000
Manifest this update: Sun 29 Jun 2025 02:01:31 +0000
Manifest next update: Mon 30 Jun 2025 02:01:31 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: 1OL8hn0mUMp7MLWs3fUhjE78eMbCtytcwEAoX5EJmY4=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:14:21:ca:58:35:36:8a:f4:8d:fa:ea:45:a6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jun 29 02:01:31 2025 GMT
Not After : Jun 30 02:01:31 2025 GMT
Subject: CN=a17744e19db1e629c0916fb3c3b39af09233a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:73:d1:21:49:9d:d8:f6:b4:06:9f:06:33:
39:49:f9:7f:2b:19:9e:83:2f:71:a3:47:2e:1a:dc:
32:ee:c6:91:02:77:48:7c:fe:59:fc:e0:81:f3:ec:
37:b3:b5:23:92:40:f3:26:14:f4:82:4e:a4:3a:4a:
b3:9b:ef:5d:6c:a7:0a:60:c0:50:58:bf:71:07:91:
31:bd:79:58:4d:dd:09:80:17:c0:68:49:78:18:79:
a9:04:a1:df:9a:83:56:cc:96:83:98:0d:d9:ec:db:
c9:d4:14:5a:de:d1:e8:7d:87:f6:a0:81:eb:0d:63:
09:6b:f0:2a:fe:7d:59:ae:b6:e7:e6:c8:e3:cc:75:
1f:d6:ac:34:85:d1:82:14:11:24:78:7f:75:5e:02:
29:50:46:19:3d:01:7e:6b:f6:5e:19:a6:6a:8f:09:
9a:70:10:09:d4:3d:18:8f:02:d1:37:06:e2:eb:d5:
ec:6e:4c:73:3d:53:ba:cc:61:c8:c1:fc:f2:97:57:
7d:d2:df:d0:3a:6d:b9:37:9d:33:91:10:6a:4f:7e:
f4:c2:7b:58:4d:94:76:3a:8b:5f:7a:97:9f:3c:74:
f6:e5:a9:8f:9c:96:7c:1a:78:a8:df:25:d3:e1:85:
3a:4a:f8:8b:9b:2f:c1:96:be:8d:6b:8e:84:28:7d:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:44:E1:9D:B1:E6:29:C0:91:6F:B3:C3:B3:9A:F0:92:33:A2:61
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:0d:ff:c7:d8:3a:b3:e9:e6:c7:98:42:8f:77:21:d7:6e:
5b:78:cd:c6:e5:95:bc:42:dd:9b:17:9d:7c:f8:30:3c:27:e1:
f1:61:06:5b:69:b9:e7:69:7d:f3:61:63:ca:b7:e2:86:36:30:
d4:94:8d:a9:1f:be:28:70:ca:df:4c:ea:9a:34:67:8b:3a:b6:
7b:25:43:29:7a:80:47:09:08:44:1f:74:63:e9:70:97:8b:ef:
e3:22:a5:ec:29:d6:32:ec:9e:22:fe:c4:d8:a2:12:62:05:4c:
68:d0:0d:ee:3c:ae:31:6b:7a:ad:da:b1:ca:ff:66:d7:2c:a1:
b6:67:1b:66:44:19:09:b6:0b:4a:5f:74:be:c4:32:32:7a:2b:
44:a4:38:89:5b:34:4b:3d:ef:a9:3a:28:de:43:3d:3a:cd:9f:
df:d6:fc:b7:33:64:0f:89:03:47:0f:ca:cc:e3:87:28:9c:e4:
d9:22:e7:a1:b3:ff:26:4f:16:5a:80:06:f3:40:b6:8d:06:50:
49:57:9b:fc:01:39:71:54:db:af:7b:fd:30:0e:2a:68:fd:39:
a7:be:1e:5d:d9:96:d7:a7:e6:f1:22:0d:fa:de:41:ab:99:2b:
27:ab:b1:2b:50:78:a1:c1:d7:5d:b4:ee:30:66:3f:27:1a:59:
05:68:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:00 2025 by rpki-client