Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: J+Zs5bDcvcqNSjtOaqhyFuaB8kDuOVsmC1RmRKeVFEo=
Subject key identifier: 6E:7A:33:41:3D:13:D7:85:C0:44:2C:AA:69:F5:19:42:8F:64:AC:6B
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 019745C28F0CDE6326A5E9B7F884221F0CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 0263
Signing time: Fri 06 Jun 2025 15:01:07 +0000
Manifest this update: Fri 06 Jun 2025 15:01:07 +0000
Manifest next update: Sat 07 Jun 2025 15:01:07 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: zXhENaqBzz+ElQKJtSnu+yyFsouS1zbGKntcl+ITxfk=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:8f:0c:de:63:26:a5:e9:b7:f8:84:22:1f:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Jun 6 15:01:07 2025 GMT
Not After : Jun 7 15:01:07 2025 GMT
Subject: CN=6e7a33413d13d785c0442caa69f519428f64ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:16:9c:89:00:78:ed:df:6b:34:4d:d9:ec:
01:da:b6:36:24:f0:59:5b:ba:89:16:e1:68:51:cf:
2b:2c:38:4d:5c:6c:9e:69:90:bd:85:57:cb:3e:bf:
d4:d4:11:e6:89:87:ee:8f:f8:32:82:a9:8f:97:3d:
77:7d:60:23:9c:93:f8:3c:f8:97:c2:49:d9:96:7b:
62:35:f6:88:79:88:22:e3:9f:8c:f9:58:8b:6a:b7:
e2:5c:82:e6:cf:b6:38:90:ec:22:75:f7:eb:61:6f:
73:90:0f:85:e8:cc:97:da:86:7f:93:ed:47:3b:09:
5b:23:65:a5:fd:56:c0:44:7a:e5:9d:d2:fa:2c:dc:
6f:d8:ee:88:9b:e1:af:13:35:16:3d:11:4d:8e:7e:
7d:d1:53:46:95:02:92:89:ad:01:b1:2a:2d:3a:2b:
3d:c0:05:b4:19:2f:0b:d7:1f:86:ad:db:6f:37:66:
89:32:f0:53:bd:5e:38:c5:50:b8:68:ed:2e:0a:ec:
1b:df:4d:98:97:3d:95:bf:bb:47:8e:c9:41:51:8c:
64:09:5e:8d:dc:1c:60:55:6d:c8:4e:72:47:87:65:
00:0f:3c:ae:b6:08:7b:fa:b5:a9:4a:a3:4e:5e:03:
09:ba:a3:0d:73:a2:7d:6f:77:c2:df:5e:ab:c4:a1:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7A:33:41:3D:13:D7:85:C0:44:2C:AA:69:F5:19:42:8F:64:AC:6B
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:7c:db:bd:99:14:60:62:94:31:9f:a3:11:f4:28:49:e2:f9:
ee:2c:dd:39:ae:45:e9:fc:87:cb:02:53:fd:72:25:dc:5e:93:
1b:b5:72:95:5c:49:50:3f:19:ec:0e:b4:48:0e:e5:8a:4b:38:
27:6c:09:9f:53:10:e1:d1:04:44:e3:24:a9:21:92:2a:2e:c2:
3f:7a:ec:1f:68:0b:b8:bc:7f:a7:bd:98:a1:1e:b1:41:d4:2f:
67:0f:96:84:4c:ae:cf:05:67:f4:cf:be:9e:a3:78:cc:60:1c:
3d:17:01:82:83:99:61:2c:0b:e6:f4:62:87:99:4a:2e:1e:35:
0d:bc:e0:7a:1c:ad:8d:3b:e7:69:12:5a:c2:ef:f7:09:f4:83:
87:f0:b5:01:ef:be:75:5c:cf:45:07:62:5d:85:22:36:96:aa:
db:d0:c6:99:83:22:0b:d4:d3:9f:11:a9:66:14:28:fe:bc:d1:
56:b8:a6:1e:98:e6:78:e2:86:0f:53:62:8d:2f:19:05:1e:86:
86:84:08:28:34:dd:b9:f5:66:d3:43:81:80:52:3c:47:52:ee:
fa:97:73:5a:83:3b:3f:9b:60:a3:ec:a1:a5:45:d8:08:a3:e5:
a5:a3:25:2f:87:fe:0c:57:06:e1:02:9a:50:cd:ab:39:25:2d:
06:de:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:00 2025 by rpki-client