Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: ejrSgAgyr4OX7PZpJ5OYJ75/KwvgqL5QS4i9HmHvzvY=
Subject key identifier: AD:16:2D:89:9B:B0:8C:60:4E:EF:A7:C2:6E:95:6A:CD:CE:B0:0E:24
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01974EC602EF19F5467E27153AB6DD3D0FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 09:01:29 +0000
Manifest this update: Sun 08 Jun 2025 09:01:29 +0000
Manifest next update: Mon 09 Jun 2025 09:01:29 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: CpLW5zVXleCt7M40A56bVdMedImNkrr1a315k7r/178=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c6:02:ef:19:f5:46:7e:27:15:3a:b6:dd:3d:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jun 8 09:01:29 2025 GMT
Not After : Jun 9 09:01:29 2025 GMT
Subject: CN=ad162d899bb08c604eefa7c26e956acdceb00e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:f1:78:3f:a3:24:53:be:c7:f2:b1:d9:12:
e4:9a:78:5c:a5:1d:fe:a0:92:45:e6:f2:f6:dc:b3:
64:a2:90:03:e2:00:63:f6:c5:48:02:e4:44:57:77:
13:7d:38:08:d3:15:38:bc:b2:94:7c:7a:af:f1:6c:
e1:98:8e:5a:15:3f:a9:79:37:53:d0:3d:7a:4f:38:
03:ac:3d:53:94:5e:a9:c7:4c:65:3b:60:18:ba:7c:
c1:73:eb:d1:af:8c:8a:cc:6a:d5:34:ff:55:b5:34:
23:9b:e1:b4:06:30:d3:c9:1b:2a:32:00:41:f4:90:
2b:24:27:f0:00:14:df:ad:68:9c:3e:eb:50:ee:b3:
68:9c:c0:5c:49:ea:08:96:c6:5f:87:0a:df:3d:88:
70:2b:ce:3a:2b:7d:a3:f5:7b:fb:dc:9c:07:64:86:
06:2b:fe:85:18:45:84:81:a6:10:c4:93:2b:8c:37:
11:95:ab:df:2a:d3:e8:1e:c4:6d:da:26:53:ab:3a:
c1:ed:57:b6:3d:b0:21:e1:0a:28:38:0b:76:f4:d4:
4f:ff:d8:54:4b:e6:00:a1:81:6c:cf:8f:b5:d9:67:
95:88:e4:18:b4:30:69:10:c4:6e:a5:8e:50:e6:31:
6d:c7:ed:9b:01:c9:31:ae:36:8b:69:ad:39:ea:ee:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:2D:89:9B:B0:8C:60:4E:EF:A7:C2:6E:95:6A:CD:CE:B0:0E:24
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:3f:6a:9f:e1:04:90:6a:81:a3:58:e4:56:3f:ce:17:66:
c9:05:69:d5:f9:09:56:44:17:2f:21:c2:48:62:a4:1d:d7:27:
6d:f4:62:22:2e:8e:55:d6:2b:a9:96:68:49:b1:f0:41:d4:89:
d4:2d:2a:2e:c1:2d:75:00:d2:14:33:bb:c6:c2:f7:ee:5b:79:
50:78:19:3f:4f:81:07:ce:03:38:a7:c7:55:a2:02:c4:ee:37:
74:40:f5:1f:d4:48:91:65:5c:4c:b1:ca:3e:4b:68:96:85:c4:
12:00:ec:43:01:eb:73:55:f0:09:c3:a5:1d:d1:e2:96:de:97:
dc:cd:86:c4:4c:ba:d6:50:08:32:fc:94:27:69:d8:da:58:5c:
14:81:da:fe:5c:56:5e:dc:8a:cc:22:28:0b:38:91:cd:b2:34:
c1:a1:c7:3d:16:1c:a0:87:65:61:c1:e7:ea:6d:8a:34:ec:63:
01:78:d2:f9:fb:db:98:f7:79:f7:81:ec:93:5f:76:3d:3a:d4:
b4:2d:c6:81:99:56:70:ca:71:c4:32:39:ed:1c:7d:ff:b2:0e:
2a:a6:bd:b9:b4:5c:69:68:e6:db:13:5b:5f:68:fd:e2:09:d4:
56:dc:4e:ff:1f:7d:86:76:1c:f8:af:fa:a5:2d:de:ad:91:fd:
05:9b:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:04 2025 by rpki-client