Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: 4AoTdCZRwF/phPair4wWPuH6pM+ahku+S946n+caxko=
Subject key identifier: 75:A4:B4:39:00:34:EF:59:C6:C2:0D:8D:21:0A:89:02:5E:B6:85:6C
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01974968337BAF46DCBD44482F79DD377A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 08:00:55 +0000
Manifest this update: Sat 07 Jun 2025 08:00:55 +0000
Manifest next update: Sun 08 Jun 2025 08:00:55 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: 7lSZZfXpoSAz+k/cenT37eKqvqMj5bVPh+hxdPwRTXo=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:33:7b:af:46:dc:bd:44:48:2f:79:dd:37:7a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jun 7 08:00:55 2025 GMT
Not After : Jun 8 08:00:55 2025 GMT
Subject: CN=75a4b4390034ef59c6c20d8d210a89025eb6856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:31:a0:79:63:85:de:0a:48:ee:43:84:93:
9d:2f:69:30:89:64:89:c0:7d:23:16:4f:3a:a9:a7:
12:3f:18:84:60:2c:3b:54:fc:a3:6d:ce:5f:65:f8:
63:5a:b7:2b:0e:7e:48:28:6e:e9:32:db:48:e7:c8:
5d:f2:64:65:33:fc:19:93:69:a9:dc:eb:c3:31:81:
06:8e:d6:1c:68:03:62:1f:43:58:f1:f1:ff:0a:b7:
8f:45:f7:75:4e:9f:4e:49:c4:41:d3:96:bc:d6:f9:
f5:f2:af:e8:97:22:61:39:fe:60:44:77:da:3e:42:
de:8e:12:8e:90:13:39:6e:fe:7b:21:e4:6d:a3:bc:
10:74:4d:63:6d:66:24:5e:9f:10:e4:00:d9:95:23:
55:45:f4:da:58:a5:4c:70:dd:7f:9d:5f:75:ba:d6:
64:da:d0:ae:23:d8:97:ef:0e:35:4b:c6:d6:51:d1:
10:ae:33:92:ad:6a:46:71:01:83:0b:dc:70:ee:78:
58:ca:4b:61:2b:db:2b:9c:ac:8b:f5:3b:59:b4:e0:
f9:0e:b6:2e:38:d0:03:83:a7:c3:3c:a9:d6:55:bf:
06:74:0f:37:29:07:b9:09:61:3b:e9:14:72:3b:d5:
95:1e:99:d0:2b:27:7d:9d:8f:44:4c:be:79:75:b7:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:B4:39:00:34:EF:59:C6:C2:0D:8D:21:0A:89:02:5E:B6:85:6C
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:88:ad:9a:db:f1:09:d5:75:cf:be:bc:bf:95:e2:e5:0c:d5:
34:ff:ed:68:25:73:77:fd:3a:39:23:44:22:1b:65:7d:ed:1a:
ea:fc:63:3b:4e:59:23:61:1d:c9:bb:03:fc:1b:1f:dc:4f:4b:
49:d1:42:ff:77:9e:05:55:14:e3:bd:9a:c1:02:b1:14:e8:b4:
d6:10:31:03:17:a7:e9:48:80:72:3e:f8:80:68:27:50:4f:d6:
d7:97:d4:f0:9b:bd:5b:11:9e:71:35:64:c4:c2:80:05:b4:cc:
57:ec:0b:e0:c3:91:0f:64:08:b7:cf:17:e1:29:4b:32:29:fb:
f9:a5:9e:26:bb:23:1c:00:5c:9f:cd:45:9b:41:5e:62:7c:31:
fc:70:96:e5:17:2f:f6:20:e4:b0:28:99:91:9d:7c:c0:15:2a:
24:1e:e0:58:5c:38:95:95:a2:ff:73:ae:b1:06:c1:3f:1d:da:
74:35:7c:ad:f1:0f:e0:2c:4c:72:54:18:26:6d:14:18:34:d4:
cc:12:30:3f:9d:cd:11:f5:4c:61:c6:df:f1:70:bd:11:26:b7:
41:48:18:54:b9:6d:82:27:80:85:88:24:9f:09:61:b9:30:a9:
db:f8:0e:05:47:06:5f:6b:0d:70:fd:7a:4a:1a:97:0e:5d:82:
15:84:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:59 2025 by rpki-client