Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: 6YvAsi0R+lE5oPG+/vr+uggBWPwCmbRZn0eZgF60K30=
Subject key identifier: 0C:F7:75:5D:74:B0:62:D1:54:4E:E6:02:B9:36:AB:64:79:1B:3F:D8
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 0197504588D25BFBF646E3460EF3B5BD01F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 147E
Signing time: Sun 08 Jun 2025 16:00:23 +0000
Manifest this update: Sun 08 Jun 2025 16:00:23 +0000
Manifest next update: Mon 09 Jun 2025 16:00:23 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: wSVTd4KpWWyS0B4NVAUngn6hR+nyPs3vSlyAARlRjYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:88:d2:5b:fb:f6:46:e3:46:0e:f3:b5:bd:01:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Jun 8 16:00:23 2025 GMT
Not After : Jun 9 16:00:23 2025 GMT
Subject: CN=0cf7755d74b062d1544ee602b936ab64791b3fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:d8:65:d0:25:69:ca:1e:6c:f2:f1:0a:c8:
17:af:45:bd:a8:31:81:8b:37:d9:4e:f0:b1:d4:28:
7c:2f:0d:83:dd:0e:b1:7b:6b:d8:76:70:70:04:ac:
22:ae:21:cf:2d:c7:8e:1a:d2:ee:20:71:95:54:09:
3d:81:87:81:7b:0a:2f:b5:bf:b4:77:a0:34:ef:2f:
64:41:c1:3d:2e:8c:fd:e0:a8:8e:a2:ab:20:99:96:
02:79:83:65:30:80:e2:86:b0:7b:90:c6:ce:3b:02:
14:95:63:4e:fe:de:b8:91:fa:d1:a2:66:1c:3d:60:
26:92:8c:5a:d1:fc:dd:55:4a:c5:17:ef:59:9e:10:
d0:2a:e3:09:7e:f1:af:0d:9d:d1:20:73:fc:7a:f2:
4f:8a:0d:ac:93:0f:67:87:4f:5a:08:58:6c:fe:05:
ea:83:0b:88:c2:34:7a:c4:7a:23:86:c0:b4:fc:92:
aa:fa:8e:f7:55:84:db:d5:84:ba:16:f5:93:49:7b:
b5:3d:3b:4d:19:7e:96:80:d3:dc:32:0b:b2:7c:24:
a2:32:61:af:d2:2b:c7:91:0f:4f:d0:2e:b9:ad:70:
eb:fe:87:ec:eb:92:ad:a8:ae:70:a9:d6:c1:00:b2:
16:7c:cb:66:0e:10:f8:3d:90:0c:db:2b:56:6e:cd:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:75:5D:74:B0:62:D1:54:4E:E6:02:B9:36:AB:64:79:1B:3F:D8
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:81:9d:9c:f7:f9:b6:45:03:e1:13:26:cd:5b:74:94:f1:16:
ca:17:71:31:83:47:1a:3b:b9:1d:0e:1a:62:42:b4:30:33:3f:
a3:6f:b6:2a:d1:b6:0f:85:ce:4a:2b:e1:2d:d4:8e:3e:4c:98:
65:50:54:85:be:d4:a1:d0:c5:d9:fe:4a:88:87:e9:5b:1f:1c:
f5:6a:ae:9e:dd:4b:13:03:b6:c5:68:47:cb:5d:e1:bd:4a:fb:
65:c6:d5:ae:5c:b3:b9:ce:ed:b6:d3:6d:fb:14:3d:3d:a1:a9:
08:ae:a3:b2:5e:3a:ff:81:25:6b:71:45:9e:09:54:8a:f1:32:
63:f1:86:49:7b:3b:34:43:dc:3e:fc:17:90:8f:fe:1a:3d:28:
c2:ea:8f:1b:26:04:04:74:6a:50:19:91:5d:2e:03:0f:f0:ea:
c1:fe:e8:4d:55:cd:39:93:c9:c5:d8:44:36:59:71:8a:91:7c:
1b:d8:09:01:11:99:fa:04:21:8d:ba:6d:31:fa:33:64:9f:f1:
66:f1:92:ab:72:98:ad:81:95:ca:e3:ba:31:0e:d1:cc:db:7f:
0e:62:42:b6:4b:41:ac:89:3f:8d:b6:4b:b8:44:53:e1:aa:08:
58:6b:19:53:9d:f9:a9:90:fe:b1:0f:73:54:84:35:74:15:27:
ab:3a:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:22 2025 by rpki-client