Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: 6sQ5JG1aRBR91Gk6Vm1+7f8TS31dZoLYtOnqExL3yyk=
Subject key identifier: 5E:0B:62:47:8F:53:63:67:D8:6C:6A:12:10:CA:5F:AE:09:72:87:15
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019760949E0315176C45B37CE0D5531D1956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 158C
Signing time: Wed 11 Jun 2025 20:00:41 +0000
Manifest this update: Wed 11 Jun 2025 20:00:41 +0000
Manifest next update: Thu 12 Jun 2025 20:00:41 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: mghpoD9/9ltOm5f+zEszgkGKmqwEJ319qMsHt6WWEm8=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:9e:03:15:17:6c:45:b3:7c:e0:d5:53:1d:19:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jun 11 20:00:41 2025 GMT
Not After : Jun 12 20:00:41 2025 GMT
Subject: CN=5e0b62478f536367d86c6a1210ca5fae09728715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:f2:ab:53:39:ec:34:bd:59:cc:73:3f:c8:
09:61:ad:70:52:3c:71:56:7b:3b:8a:54:88:c0:6f:
da:8d:ab:6c:80:77:20:62:95:13:25:85:c1:e9:cf:
43:92:28:63:02:23:ad:d6:f6:9d:9a:b7:3e:1a:2d:
73:db:14:9e:8f:b2:3c:77:8a:2d:43:4b:81:06:77:
71:06:d7:dd:02:1f:e1:9b:88:05:56:80:c7:e7:ca:
89:dc:8b:2a:ac:f3:2b:55:4a:a2:4a:bf:ec:3a:db:
5a:63:41:77:b1:7e:c7:64:df:a2:e3:0d:4b:bc:8b:
07:b6:5e:18:8e:77:de:03:da:25:66:56:4f:a2:27:
8d:f9:72:08:00:85:51:04:90:b6:9d:f5:a7:d1:81:
aa:a7:1d:46:03:59:8e:94:ed:63:86:a5:69:66:34:
c5:41:43:17:0e:bf:d9:97:a5:9a:3b:fb:e7:06:92:
ef:72:82:07:a5:28:24:62:c2:e0:ab:0e:13:ce:5a:
ed:59:95:ce:a8:26:85:8c:95:f3:4c:26:48:67:58:
1e:78:85:9d:fd:8d:28:cf:4f:2f:98:71:76:67:d2:
22:21:8a:3a:83:1d:60:fa:8b:00:8b:9a:05:0a:a2:
e5:9f:fb:69:33:9c:86:ff:61:94:93:34:b2:6b:8c:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:62:47:8F:53:63:67:D8:6C:6A:12:10:CA:5F:AE:09:72:87:15
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:04:94:49:4a:6d:45:96:86:ad:91:98:1e:c8:8d:91:14:
cd:ad:30:e3:5c:a3:1c:d6:1a:dc:a7:be:30:22:7f:9a:2a:2e:
66:0e:3b:1e:5b:2d:ed:d6:f5:86:8e:a5:07:32:c2:78:80:0a:
ac:7d:4b:7c:55:bb:1c:ce:a4:4f:88:48:50:6f:ca:02:68:10:
2d:e0:e3:10:ed:21:aa:8f:59:38:4f:be:fb:56:1e:d1:c4:f2:
16:53:56:da:59:de:c6:df:2b:83:a9:1a:a6:0e:74:98:54:cd:
83:55:d2:57:dc:0d:43:83:22:1a:fd:fc:86:05:7e:89:6f:f6:
98:29:b7:fd:dc:a2:de:70:36:b3:a1:ef:99:00:a0:60:2f:48:
cf:0e:e4:c3:33:06:81:a4:d1:5f:8c:da:a1:2a:1b:c7:3b:87:
c5:d5:55:69:d3:06:e0:88:59:26:36:4d:57:54:6a:83:ae:65:
b5:18:28:9d:3e:45:cb:1e:74:4b:78:76:21:19:90:53:cc:34:
10:6b:50:75:42:78:e5:25:63:7c:3a:21:b0:42:ec:9d:9c:65:
bc:d2:9c:35:b9:91:ea:d1:9f:da:95:d1:23:c8:8e:7e:bd:62:
e4:16:79:7a:66:5e:fc:2a:c0:8d:b2:3a:43:dd:06:1f:e1:4d:
01:dd:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:35:04 2025 by rpki-client