Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: QoCiCpDjdW2XMcIA+MTitblyj//uqq+3W60U2VkPyy8=
Subject key identifier: B8:C1:40:19:A7:90:FF:01:DE:CE:D1:18:D7:BE:D3:56:61:D5:FF:20
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01976EBDD01EAA5B13D1B6B182DCDBEBFE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0E9F
Signing time: Sat 14 Jun 2025 14:00:22 +0000
Manifest this update: Sat 14 Jun 2025 14:00:22 +0000
Manifest next update: Sun 15 Jun 2025 14:00:22 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: MLiFkxDWiq6sfRPL8rr14vyIgvHbTzqIe7CjmJIhL4E=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d0:1e:aa:5b:13:d1:b6:b1:82:dc:db:eb:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jun 14 14:00:22 2025 GMT
Not After : Jun 15 14:00:22 2025 GMT
Subject: CN=b8c14019a790ff01deced118d7bed35661d5ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:77:d1:f5:c5:9d:27:e7:a7:77:46:1f:55:
fc:ac:1b:80:ae:59:d1:e0:df:c8:19:5b:93:9e:7d:
33:b5:26:df:c1:43:76:b0:81:3d:96:3a:3e:71:77:
34:13:3a:98:81:88:43:d7:13:e3:5c:3b:0e:e5:41:
ce:ff:d1:2d:cb:b0:48:f0:f6:8a:3a:f5:56:b6:ce:
d2:0c:ca:b3:35:4f:a2:7f:f8:fa:6f:56:bc:19:f7:
1a:a7:2d:81:fb:8d:e7:a7:14:a9:f6:2d:d5:8e:0b:
c8:e0:5a:2b:c2:a1:a1:01:47:36:57:db:ab:05:72:
d4:67:61:da:b4:f5:f2:8d:1c:65:2a:87:60:73:c5:
ac:a5:7c:16:41:2d:8c:e8:a5:10:a1:e7:b1:3b:c1:
5a:48:b5:c7:9a:dc:53:77:c1:5a:ff:ac:7e:17:00:
e3:aa:69:5f:cf:b7:dc:d8:c6:95:f4:d0:84:83:3f:
f8:50:0f:23:dd:6e:9e:69:26:cd:00:61:04:d4:47:
da:14:1b:9d:86:4c:c9:e3:dc:6c:08:d2:2b:6d:50:
f5:de:64:69:d6:21:98:98:a7:ed:c8:f8:9f:c1:1a:
33:fe:ba:dd:c7:35:65:37:a0:3b:9d:7d:39:dc:d2:
f1:0e:6d:14:5e:ef:2a:d6:14:d1:ec:4e:89:23:de:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:40:19:A7:90:FF:01:DE:CE:D1:18:D7:BE:D3:56:61:D5:FF:20
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:90:c6:82:ac:5f:3b:e8:ac:7c:83:7f:50:5c:21:e5:e9:
df:85:9e:88:c9:ed:94:00:c9:e0:1e:34:35:91:c4:f6:91:97:
12:65:49:e7:7d:b6:70:d1:47:bc:9f:e2:d2:24:33:76:d1:dc:
e7:3f:b6:e8:3a:03:10:5d:38:5e:dc:47:ff:06:c4:be:83:76:
93:ea:a0:af:69:c5:ae:d0:21:df:50:9d:8f:e3:50:1d:2c:4f:
bd:42:34:e0:30:99:fd:87:59:1c:99:05:e7:8d:0d:55:b1:9d:
15:61:41:f8:d1:a6:b0:57:e6:61:d8:9b:92:84:4e:46:c4:54:
aa:1f:db:e4:cb:61:a7:f7:74:e8:e2:5a:12:af:91:38:e2:49:
66:1f:3a:c2:26:7f:46:a9:38:40:d6:4c:8b:96:18:f3:b6:48:
0d:0f:35:a5:3c:c5:e8:d8:e0:27:76:f5:8b:ff:6c:1b:05:41:
23:13:7f:d5:af:c2:3a:44:4a:15:bd:a7:d5:e5:53:42:74:f4:
05:de:5a:2e:cf:75:9b:49:82:ee:97:81:f7:ee:0e:7d:dc:21:
f7:bf:f4:86:da:36:0c:33:bd:35:9f:28:ec:40:12:32:af:97:
2d:ee:f2:0f:75:2b:17:61:74:5e:19:79:6a:69:ac:31:5c:8a:
a4:26:b6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:35:25 2025 by rpki-client