Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: grnlTl3JNGW7SrUirqLgXAUcRC1zojnmZug6gdbHVh0=
Subject key identifier: 49:22:03:16:3C:66:DF:95:A3:0F:1F:48:EA:B8:3E:93:8A:67:12:02
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 0197B7EABF849F2520E6FA4B770EC90554EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 19:01:44 +0000
Manifest this update: Sat 28 Jun 2025 19:01:44 +0000
Manifest next update: Sun 29 Jun 2025 19:01:44 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: 9PYER11u57oBAw1hngDiRPx+yMH+7Po7dub/oGeRmeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:bf:84:9f:25:20:e6:fa:4b:77:0e:c9:05:54:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Jun 28 19:01:44 2025 GMT
Not After : Jun 29 19:01:44 2025 GMT
Subject: CN=492203163c66df95a30f1f48eab83e938a671202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:7a:cc:35:b7:a7:03:0c:3d:d7:f8:32:b3:
db:6d:9f:b6:35:4c:46:5c:55:f4:51:4b:1f:39:0b:
dd:43:94:8c:fc:85:41:44:79:7b:d8:73:50:84:23:
dd:04:2b:5b:47:f3:ef:83:eb:d9:45:83:3c:f9:db:
6d:b3:41:6e:f4:02:80:3c:67:56:ff:00:c2:34:34:
72:88:fc:66:26:06:95:bb:9e:44:8d:5d:5e:0b:5a:
17:88:09:ca:ea:b0:40:9f:ca:70:01:b4:91:0d:1d:
6f:a7:f7:13:af:22:7c:7f:f5:ab:78:55:ef:8b:db:
34:66:38:fe:8d:5e:48:a4:4b:16:90:56:70:73:59:
87:9c:48:24:7b:cc:89:c1:6b:73:6b:2c:fb:ae:31:
b6:0c:b9:da:eb:60:8a:cf:ff:ee:02:32:0b:9b:5d:
96:b1:dd:0d:c4:bb:6d:84:81:55:f7:42:53:e7:5d:
17:6b:eb:64:34:e9:48:ed:59:46:d4:8e:d7:b7:c8:
87:f0:c3:96:bc:83:59:73:c0:1d:0c:cc:5b:8c:2f:
ca:de:64:bd:fc:de:06:19:17:4b:eb:92:82:ef:79:
c7:6c:0d:96:bf:62:17:39:4a:b7:6e:78:cc:a2:b9:
aa:c6:0c:0c:5b:4e:62:b7:bb:f5:db:00:75:d2:12:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:03:16:3C:66:DF:95:A3:0F:1F:48:EA:B8:3E:93:8A:67:12:02
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2b:e8:91:15:89:5a:f6:e3:07:2f:bc:fd:82:85:3a:03:6d:
dd:24:b6:99:8f:a1:de:ea:7a:63:cf:01:ba:75:5c:93:a0:d2:
e1:be:28:3f:4d:77:28:98:7d:a5:be:28:ef:d1:2b:1a:18:ef:
a7:92:92:0f:84:d2:63:78:b7:dd:36:a8:4c:01:c1:11:7f:9d:
90:b0:a1:9a:36:c8:fe:1e:9a:16:39:57:1b:43:b4:b3:84:f3:
da:2c:54:88:4a:ca:a2:2d:7a:b6:6a:f5:41:da:15:47:62:04:
e3:32:c8:f3:20:f0:23:75:7a:70:8c:6a:30:88:94:5a:a1:f8:
67:79:5d:48:6b:70:fe:0e:91:76:ed:11:b1:e8:3a:a5:60:60:
69:83:a5:73:1a:6f:9d:7d:37:01:ce:9e:74:49:48:81:25:a7:
5b:e9:1f:e5:90:bf:32:04:a2:42:12:4a:5d:a7:43:95:d8:44:
f2:f6:13:68:4b:56:48:0e:f5:03:41:cc:32:b3:15:82:70:bf:
29:ae:4a:7c:3e:7c:a9:22:97:b2:3c:4e:be:01:37:a0:8a:f1:
95:3e:1f:53:33:82:b3:2c:7d:58:7c:cd:1a:10:17:7c:06:76:
f5:a2:8d:44:cf:b3:58:b8:46:9c:8a:fd:07:b2:61:56:e5:51:
eb:bd:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:51 2025 by rpki-client