Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: nP3xSRulTfp4u8qw7hJTJy+zV4vrwjKw6oiWU/j0Kig=
Subject key identifier: 5D:B1:15:50:D3:CB:D4:2A:E8:89:47:B7:5C:E9:72:FD:C5:C3:7C:F0
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 01974A7B22F43EF8AACF454677774C1E5A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: CTG75p23DgU52LwRpRJy5OibDOOzRldcIP0f6rCd3Xw=)
3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:22:f4:3e:f8:aa:cf:45:46:77:77:4c:1e:5a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=5db11550d3cbd42ae88947b75ce972fdc5c37cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:ab:ca:cb:79:bc:f4:a0:25:23:8d:1f:3e:
f6:c2:01:09:03:1d:17:43:ec:a8:f1:d8:f3:87:a0:
66:8c:dc:24:dd:b7:44:ea:c4:b5:70:14:0d:59:75:
27:b8:f4:86:76:8c:e2:d9:d1:28:0a:cd:34:fb:5d:
7b:9a:27:cb:62:65:53:28:c8:72:8a:89:a6:fe:2c:
0f:c6:52:a1:13:d9:bc:eb:7c:d3:37:ec:05:e4:5d:
36:67:23:4f:45:31:65:49:cd:68:b1:4d:9a:71:d8:
71:90:a0:78:57:9c:63:20:ed:61:c8:70:76:21:1e:
00:75:0c:aa:b7:ea:fa:ab:4b:7c:fc:aa:ea:55:88:
bb:6b:ab:73:a7:84:a9:4a:38:be:d8:a3:73:8a:d8:
46:63:af:23:ba:1a:b8:3b:59:dd:0a:e1:52:21:2d:
19:01:24:c3:c1:43:39:c9:d2:e8:ca:85:52:6a:52:
c0:ed:7a:09:84:3b:b6:e4:63:13:80:0b:d0:75:99:
f3:f1:9c:47:37:77:f3:76:57:24:fe:6e:6b:db:eb:
ab:b2:71:e4:65:1e:ae:35:40:9f:46:33:41:ae:2f:
70:f0:d0:cf:39:b2:dc:8e:55:82:7f:fe:de:d0:e9:
14:4b:f8:f7:34:42:64:7e:f9:ed:78:81:07:03:a6:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:15:50:D3:CB:D4:2A:E8:89:47:B7:5C:E9:72:FD:C5:C3:7C:F0
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:08:02:f9:35:e0:0d:02:c8:22:c6:7a:c1:d8:df:d3:3e:9a:
cb:42:39:a5:7c:1a:b4:1b:87:5f:20:61:b8:77:05:eb:a3:af:
e6:39:5b:58:13:e3:5b:1a:53:d2:8f:3f:c1:4d:fe:7b:b0:86:
b3:a3:11:1d:c6:d8:5c:89:59:a4:ef:58:33:eb:c5:25:c1:7b:
1f:dc:9f:48:8b:b8:59:8e:ce:13:d8:23:81:25:6d:1d:bf:a7:
94:d9:8f:e8:4e:22:35:37:d9:1b:a7:38:6f:37:5c:df:0b:fb:
01:01:84:f6:4a:85:67:2a:11:a1:cc:70:26:04:b4:81:6d:57:
20:af:21:bb:c3:51:32:cc:d0:44:92:5a:4d:21:40:2a:28:e2:
27:27:64:95:07:98:dc:a6:78:89:4b:d9:d1:3a:5b:ae:72:c5:
55:52:9a:41:7b:a5:11:2f:03:55:b0:72:04:57:80:62:79:73:
fd:35:ba:f6:94:d6:b0:3e:29:e0:bb:67:79:02:97:98:05:79:
19:63:11:f8:a2:b9:07:d2:4e:2b:39:14:1a:c1:d9:6b:e3:fb:
84:69:7c:a3:22:19:a2:61:05:81:21:e0:b5:06:be:1b:17:1b:
80:f4:f9:b3:3e:23:6c:01:5d:87:88:25:e9:75:ec:da:4c:26:
33:35:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:08 2025 by rpki-client