Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: A2ItoiOM5nn6u62XOw2S2Lr85b4VjPLnv/lbpp1RkpQ=
Subject key identifier: D9:27:67:39:BA:33:D3:E0:36:50:6C:47:2F:A0:14:B4:F6:D1:34:48
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01974AE8DB022963AE65480BEF6F9D50007D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:01:03 +0000
Manifest this update: Sat 07 Jun 2025 15:01:03 +0000
Manifest next update: Sun 08 Jun 2025 15:01:03 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: CIpfxhZjZCwNTR2o9lYIdf0xwDYmdh+VHTtj96/HckA=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:db:02:29:63:ae:65:48:0b:ef:6f:9d:50:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Jun 7 15:01:03 2025 GMT
Not After : Jun 8 15:01:03 2025 GMT
Subject: CN=d9276739ba33d3e036506c472fa014b4f6d13448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:bc:65:ab:87:ed:92:e3:8c:12:97:60:e7:
16:15:82:5c:d1:2c:c4:c0:83:eb:c7:fd:e7:c2:6d:
77:79:46:11:2d:cf:3b:7a:a0:ce:d2:2f:a8:85:7e:
07:3d:2d:92:3a:91:70:2a:16:9e:7a:e5:26:3e:ff:
7a:0c:5b:12:a7:ee:59:79:ac:58:c0:e4:07:12:df:
8b:fe:37:f1:7e:0e:2a:59:f6:10:09:18:b2:01:2d:
43:ba:c1:d2:47:64:ea:d0:b4:09:6a:bc:fc:a3:c4:
61:6c:4e:04:9f:48:30:2c:76:8f:e7:e1:f9:d7:e2:
95:a4:ce:bf:bf:27:8e:fb:b1:23:f5:2e:37:73:82:
07:3e:20:2d:67:c9:2c:78:ac:8e:0d:ed:87:9e:e0:
df:31:41:99:11:69:7d:0b:bb:b8:56:7c:53:68:56:
15:81:a0:2a:40:78:d9:86:22:47:7b:96:a2:cd:12:
75:8e:80:9e:68:be:58:56:ee:89:ab:bc:1f:94:77:
8a:7a:99:9d:ca:93:4d:cd:38:ba:35:d8:19:d0:4b:
78:98:73:9b:6c:b6:46:be:4d:61:89:19:72:36:5a:
16:de:5b:67:c9:8f:b0:74:84:3c:1b:a2:87:0b:b0:
40:d0:f4:d1:c4:1d:eb:ae:09:f4:66:18:e7:5f:53:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:27:67:39:BA:33:D3:E0:36:50:6C:47:2F:A0:14:B4:F6:D1:34:48
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1c:96:11:8c:80:c3:49:b1:ea:58:de:27:f3:39:cb:25:7d:
74:41:7a:cd:c9:4b:e5:5e:b1:8f:53:e1:25:7a:49:c5:41:a4:
70:31:a8:88:8b:e7:68:92:fc:60:f6:69:87:33:26:fc:cc:f1:
71:87:36:fe:c8:9a:29:d6:ad:f9:54:9a:ce:86:4b:fa:6a:0c:
50:68:01:da:25:b2:b3:52:f4:ce:b1:0b:c3:fa:3d:c1:9f:f0:
cc:ba:df:4d:e3:10:03:b3:e8:52:2f:b0:66:b4:6b:95:c3:61:
83:f6:99:1c:75:46:57:1b:56:03:aa:51:a5:45:31:71:0c:18:
e2:b5:75:69:06:b2:ad:37:fc:65:6a:8a:53:e2:67:be:b2:59:
60:1b:65:36:12:3f:23:5a:b1:04:d9:cc:0a:2c:06:fd:81:b3:
4e:a5:a3:bf:e3:3f:de:71:74:6f:1a:4c:65:c7:c5:eb:dc:55:
cd:9c:8a:1d:50:a7:22:a3:d6:7d:44:7c:7c:be:66:a8:11:be:
44:ce:7c:8a:39:f8:01:3c:b5:6e:23:7e:6c:fc:2d:24:60:a9:
c6:ef:8c:98:c1:13:e7:91:8b:06:c4:11:ec:85:28:76:2c:00:
aa:3b:4b:3b:85:39:51:c6:3f:95:d1:c4:ba:81:38:33:6c:ae:
d8:fb:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:04:44 2025 by rpki-client