Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: nr8ldnc76JbcZS7xddKqGWmccINUKpMSkdFr1UTV2Gw=
Subject key identifier: B3:94:C0:B5:3F:C3:01:83:45:E1:1F:75:99:1A:AF:81:17:5C:55:71
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 01974A0C7E876ACD7866C761F1405BAA4B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:22 +0000
Manifest this update: Sat 07 Jun 2025 11:00:22 +0000
Manifest next update: Sun 08 Jun 2025 11:00:22 +0000
Files and hashes: 1: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
2: MQoy-ze9auOiRnYWkevo5ug6b74.roa (hash: e50zWSr9FAOpXTByWZCk9NzWnhOqRMc92RH7Gp5XlqE=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: WoxrX4M2JDTo0B4Qc8t09SWrXy6X/f17Dou+EeC2hZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:7e:87:6a:cd:78:66:c7:61:f1:40:5b:aa:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Jun 7 11:00:22 2025 GMT
Not After : Jun 8 11:00:22 2025 GMT
Subject: CN=b394c0b53fc3018345e11f75991aaf81175c5571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:2b:1b:71:56:67:0d:70:ac:97:d1:62:3f:
d9:78:e2:39:43:c6:f9:51:48:4e:2e:a2:01:c8:03:
d3:c0:f5:7c:c9:0c:1e:7d:d6:33:e0:1f:73:e9:14:
e5:fa:92:d4:8c:d5:9d:46:10:cc:47:64:5d:3c:10:
a5:85:4c:6f:d3:b2:18:b0:48:a5:e1:19:14:4a:ba:
ce:b2:e3:6f:f5:0b:d0:3a:4d:ab:c3:27:35:a1:62:
59:17:51:9d:63:61:80:01:31:12:c6:e7:49:95:28:
2a:56:34:58:52:e1:78:43:0f:b2:1e:e5:9f:42:f4:
1c:ed:7b:da:ba:9f:00:1e:db:ea:ea:45:bc:1a:2e:
e8:89:e6:da:39:dd:02:10:77:b4:63:7b:13:f8:e6:
56:e9:25:c2:98:c7:08:7f:ff:cd:82:2d:86:3e:72:
61:92:6b:cd:5a:a7:4f:b0:c5:a7:7b:46:6b:8c:27:
9d:78:4a:9c:14:1f:a7:b1:2d:e6:5e:26:8c:57:91:
dc:8b:c6:ec:c7:e1:53:64:40:06:bb:9f:29:ca:37:
c0:1e:cf:93:9d:ac:88:cc:be:81:9e:9b:e0:9f:83:
19:b6:c5:03:00:1b:3b:c0:ee:d1:cb:aa:b9:8d:fc:
c0:85:23:20:08:03:d4:69:0e:91:c8:18:2a:48:7e:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:C0:B5:3F:C3:01:83:45:E1:1F:75:99:1A:AF:81:17:5C:55:71
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:17:ec:94:a8:d0:ec:45:c4:55:f8:01:a8:4b:dc:d5:9b:60:
63:bb:75:5b:77:f2:30:d3:b1:7e:75:a1:ad:c5:58:59:e5:95:
52:5f:29:50:30:1b:b3:df:26:d7:94:84:57:fd:b4:54:a2:3f:
36:f6:10:b4:0c:ad:27:97:14:22:c5:3e:7a:6f:41:24:c5:40:
c0:c3:b8:3b:54:e1:cf:62:fb:9a:f1:dc:ba:f2:a7:f3:b7:46:
13:de:d8:ac:a1:63:1e:55:a5:e5:8d:4c:64:50:38:f0:c4:cc:
6f:8e:2a:b0:5b:a0:26:07:b8:ee:e3:72:a0:78:e1:42:5d:df:
51:2c:21:47:93:52:cc:29:3d:61:1d:26:6f:6f:30:0e:0a:29:
dd:a3:ef:6a:53:a0:d8:df:58:f4:c0:cd:97:13:f1:54:61:75:
59:fa:3c:bf:43:ba:97:88:3a:a1:2e:54:3e:26:de:0a:f7:c3:
b9:92:e0:10:64:a6:36:35:30:39:7b:f6:77:cc:df:8d:67:2f:
2c:35:08:39:c5:42:74:d4:5c:11:80:e7:24:b5:e3:f5:8a:08:
90:91:f3:91:61:93:d1:e5:43:f5:e6:69:46:58:e5:07:2b:6b:
7a:2d:02:30:01:10:93:d4:19:91:2a:d0:3f:d9:ef:83:64:81:
db:35:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:51 2025 by rpki-client