Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: MNtlXhcyxY+8ikl+tYLX6eoCF1OS9Pl1xZQJLjCWJ3w=
Subject key identifier: A6:F3:8B:68:C4:2D:EB:9F:2B:E3:A9:77:FB:7D:95:A1:0E:92:9A:AC
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019754FE85AA349F04B23BBB25AD067DBCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1586
Signing time: Mon 09 Jun 2025 14:00:55 +0000
Manifest this update: Mon 09 Jun 2025 14:00:55 +0000
Manifest next update: Tue 10 Jun 2025 14:00:55 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: 6UJZqLC4mV5lWeRR5aclW8AmQT2Z+F14CGufQzd2SSE=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:85:aa:34:9f:04:b2:3b:bb:25:ad:06:7d:bc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jun 9 14:00:55 2025 GMT
Not After : Jun 10 14:00:55 2025 GMT
Subject: CN=a6f38b68c42deb9f2be3a977fb7d95a10e929aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:d5:ba:c3:8d:c3:98:e4:85:a2:15:c4:57:
ab:1e:f1:df:b3:7b:98:f2:ea:8c:4d:36:97:0b:42:
e7:41:0d:b5:f0:95:05:bb:ca:00:70:b8:cb:dc:ff:
21:df:1d:96:f0:1a:11:25:d5:6a:b5:db:4f:96:bb:
f3:8f:f9:11:0e:e6:fa:aa:7a:7d:2c:20:52:20:2c:
ab:9d:5e:e4:4d:31:1f:5c:1e:6f:26:a7:78:32:85:
56:94:7d:9b:45:a7:0f:6f:1a:c4:56:f7:b6:78:48:
62:51:dc:d8:b0:45:a9:0e:46:e2:25:8b:08:c8:9b:
45:30:1b:45:8f:99:a9:9d:81:1f:0a:26:4d:56:59:
65:24:3b:cb:96:87:8a:0d:26:a4:8d:42:ac:ec:d4:
95:af:8b:87:c5:81:17:d9:a3:16:c5:f2:1c:66:86:
95:2d:78:be:16:82:d6:50:f7:fd:7f:71:f7:96:5e:
f8:fd:d1:db:91:6a:31:c4:f9:57:f1:59:31:ae:3d:
ff:22:01:32:46:0f:87:91:0c:95:4a:5a:f4:d9:79:
48:15:f2:98:88:20:5f:f7:cf:42:20:2c:8c:8d:35:
89:4a:db:7b:ba:af:98:2a:5f:19:69:c3:3a:f1:d5:
78:0a:26:ba:c6:5b:8e:aa:a1:e4:e1:84:64:2f:d5:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:8B:68:C4:2D:EB:9F:2B:E3:A9:77:FB:7D:95:A1:0E:92:9A:AC
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:61:91:14:89:ba:52:f1:9c:ac:ae:0e:8f:95:d3:28:69:c2:
09:e6:82:06:74:71:dc:18:be:50:b6:c8:0d:ef:83:ed:83:3b:
6f:0a:aa:d1:65:86:06:f4:ed:c9:62:15:59:ee:a7:7b:39:81:
fa:4b:3c:9a:c8:a3:f4:18:e6:e5:e8:85:fe:96:bf:84:a0:e9:
0c:2f:9f:37:1e:57:65:f0:31:b1:0f:e9:4c:04:fc:21:05:6a:
59:9c:09:a0:88:7d:96:17:8d:6e:db:e6:11:fa:5a:cc:8d:ee:
b0:96:4d:f7:52:ef:bd:84:69:99:e0:54:4a:21:5b:8d:01:7e:
8e:3e:6d:dc:b0:ca:3b:9d:35:33:ce:1a:e2:2a:47:5e:95:74:
85:97:a2:11:5c:e2:55:16:a4:24:fe:d7:8c:2c:9a:5e:00:f1:
97:a9:6a:ba:28:36:bd:ea:3f:ab:77:45:1b:be:9f:b0:ef:0e:
c3:ac:d3:f7:74:54:72:74:07:e9:04:17:bb:fe:2a:26:bd:eb:
e4:2e:fd:d4:90:81:e2:e0:c9:40:90:a2:27:a6:90:7d:2a:49:
fe:0d:c6:ba:50:ea:a9:09:d6:95:c9:bc:b4:b2:77:fa:4e:70:
d3:49:bf:32:9c:8a:c2:43:92:5e:1f:ba:37:9c:d8:e2:83:ab:
9e:a9:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:15:23 2025 by rpki-client