Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File: jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier: qD+vk7f0U4CHLjwAhqJzl77LjVhFOdmC6S4zgbaW6Tw=
Subject key identifier: 2F:AB:DB:90:B1:01:A7:9C:99:2D:DA:2D:B8:6F:78:11:CC:D0:8A:D7
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial: 0197B7EA44D5B4FA3C4057564BED1C9F0784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: 8DFREsz67roq72EhqNj788hY8vo.roa (hash: 0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=)
2: gYXXaClMotLbmJoUOleGHhnd0Lw.roa (hash: FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=)
3: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: NiXI32h2MIocSMpMR06jhdi6YKD1oj1VJUMQhO4m80c=)
4: qbA_9GdwQHPtmS9g6PrCyj74AbM.roa (hash: bivTcz5xx7Jgw1fjpQZeDQON5L3d9aNyp2TKXc5yy2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:44:d5:b4:fa:3c:40:57:56:4b:ed:1c:9f:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=2fabdb90b101a79c992dda2db86f7811ccd08ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:0f:4c:c7:d7:c8:56:9d:43:b4:00:1b:7e:
0a:f6:cf:c1:7d:4f:4a:a8:43:9b:73:e6:79:d7:00:
c2:f8:f2:53:40:68:fc:8b:89:56:1a:e4:fa:ba:e0:
b8:8d:03:98:14:61:02:4e:ff:99:56:f2:3a:8e:2d:
50:06:42:e1:c1:a0:1f:81:97:53:0a:da:ea:5d:88:
9e:21:63:44:b7:7a:a4:b9:cb:80:e3:79:7e:86:7f:
08:b7:7f:de:1f:79:97:2f:a7:21:14:9d:11:4d:c4:
c0:9f:20:a6:e3:26:fb:39:33:b6:dd:b1:0e:1b:0b:
2d:0d:b0:fa:84:15:07:3a:8d:b2:4f:e5:08:c7:73:
a0:73:32:d1:8c:fc:55:28:8e:17:23:de:bf:af:15:
1f:93:b6:33:3f:4d:86:fa:ab:13:5d:49:73:f8:0a:
71:aa:55:40:a6:fd:52:e7:67:57:57:50:ca:d8:8f:
b1:a3:19:6b:2e:68:86:d4:cf:98:a1:48:da:5f:57:
98:44:c3:a3:44:9c:8f:41:67:fb:07:66:18:7f:89:
1c:fd:3c:80:f2:d8:0b:28:d2:ad:26:4f:4f:92:07:
6c:51:98:cb:93:55:59:2c:9b:23:47:2e:65:6e:72:
9b:ee:8a:1c:31:1d:80:75:ec:17:2c:1b:cd:6b:3c:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:DB:90:B1:01:A7:9C:99:2D:DA:2D:B8:6F:78:11:CC:D0:8A:D7
X509v3 Authority Key Identifier:
keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:4f:60:4e:26:a3:96:bd:bf:3e:91:3d:b6:16:34:e0:dc:
a1:c4:3c:d9:eb:a8:a7:86:e9:a2:e7:49:01:34:24:e6:ea:4c:
c9:f5:3f:85:05:65:fb:f3:d5:41:5a:f9:cd:87:3d:87:d2:f9:
28:85:07:38:54:c7:69:f6:b1:f7:5e:76:53:b5:fa:f9:0e:19:
8d:e9:4a:9c:c0:26:74:ee:67:4f:d4:95:7b:0c:bf:28:c4:76:
ee:b4:79:1b:99:99:c1:b1:69:48:bf:84:0d:ba:16:d4:6f:49:
31:6a:f7:9c:1e:39:ae:4f:40:38:4c:3f:cf:7b:7c:ae:92:5a:
98:1c:3d:06:f1:d0:0b:a8:e2:5e:87:8f:ba:ac:f6:14:2b:2b:
6a:9a:2e:bb:1c:a5:e5:d2:de:8e:51:b9:c6:06:68:10:cc:3f:
5a:ee:e8:4b:da:f5:1d:5b:08:2d:91:4e:36:86:97:93:7c:93:
04:a0:d0:1f:59:ea:9d:63:7f:c8:b9:74:af:4e:42:20:3e:f2:
b2:17:36:b2:4d:0b:ec:2a:7a:1d:66:22:c2:22:19:2b:ee:9e:
95:5b:53:37:7c:41:88:3f:d3:51:da:67:83:b6:0e:52:25:fd:
e9:e5:0c:81:15:7f:19:2d:d8:15:d1:e9:42:18:2e:69:25:5b:
69:c1:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:03 2025 by rpki-client