Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: hhOrTIGeDPIhXAO8NXUajH1m5Z+agEpsv9adg1+xP1o=
Subject key identifier: 4F:F4:BE:00:9D:24:02:E3:46:4D:C6:4F:4F:2C:3E:A4:49:B6:9F:F6
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 01975D93BC29620BAF14880BF7069E7BA47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 06:00:52 +0000
Manifest this update: Wed 11 Jun 2025 06:00:52 +0000
Manifest next update: Thu 12 Jun 2025 06:00:52 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: KgbOiz9hFO9vmdJUABJypmYVyXiadkU/8IGv3iUsCZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:bc:29:62:0b:af:14:88:0b:f7:06:9e:7b:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jun 11 06:00:52 2025 GMT
Not After : Jun 12 06:00:52 2025 GMT
Subject: CN=4ff4be009d2402e3464dc64f4f2c3ea449b69ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:43:ad:54:42:1c:fc:4e:29:bc:34:98:7e:
52:30:36:ba:b0:8b:9f:23:6a:16:a6:e1:f8:fb:db:
86:bc:0e:65:92:10:56:96:d0:b1:91:4c:ef:1d:7f:
80:67:a2:11:ee:16:ab:ee:f7:b6:02:c1:ea:8a:77:
58:1e:09:cc:59:da:31:3d:ae:1e:63:c2:6b:f1:45:
fe:4b:66:b5:c3:9d:05:71:fc:35:df:50:02:e8:51:
85:05:98:f1:d1:5c:df:a5:a5:55:e9:c1:ff:f1:14:
17:05:67:55:14:e0:0c:aa:0a:e4:a1:2b:97:a8:a3:
f1:fa:79:c7:5a:80:5c:2b:d7:32:71:10:23:01:60:
d0:e4:2f:44:3e:2d:3d:69:1f:00:08:cc:e2:25:7d:
ad:6e:28:ab:40:25:60:d3:bd:30:c5:98:81:af:4d:
5c:6c:90:07:b3:a1:13:95:31:10:87:9b:2d:83:c8:
22:a3:c3:31:68:fa:9d:4a:4c:13:f6:3d:f2:c8:67:
44:a6:a1:39:04:da:34:09:af:97:59:ed:74:61:fa:
7b:a5:41:aa:e0:8b:84:5a:26:8a:88:73:61:3f:99:
ae:d0:45:eb:b0:82:01:4d:85:77:9c:b4:d2:ee:07:
5e:c0:e6:a9:85:a2:a0:45:0b:21:06:bf:29:c5:0a:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:BE:00:9D:24:02:E3:46:4D:C6:4F:4F:2C:3E:A4:49:B6:9F:F6
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:e7:56:99:5e:ba:25:d1:22:01:d8:d9:ff:d0:46:57:9c:
ab:3f:9c:e3:05:8f:c6:55:ce:c4:a0:46:ce:d9:9b:6f:a9:62:
e2:07:79:28:80:35:77:75:96:ee:1c:6a:c1:71:c5:1a:e1:64:
39:9a:ef:8c:3a:11:ba:e4:e8:2e:7c:24:7b:a9:44:21:18:3d:
54:28:ee:f1:1e:4d:1a:09:27:f2:79:3a:36:5f:2b:8d:60:91:
3c:de:1a:c4:e4:1e:9b:84:c7:4f:d0:82:46:a1:47:75:d9:92:
ce:3f:33:b7:bc:94:06:e3:b4:c6:8f:fb:da:9f:e5:98:d6:6f:
de:47:2d:e8:ea:61:0c:45:e3:81:10:43:d6:1c:9e:da:d6:dc:
40:64:2d:d9:6f:e0:6f:d8:f2:7f:6d:c9:8f:79:4c:6e:00:af:
b9:39:dc:b9:15:46:d4:db:67:86:6c:f3:e6:37:7b:25:ce:7e:
0a:00:2b:e1:d4:6e:b5:c1:ea:2f:e7:f6:28:f4:37:60:e7:3f:
21:3f:f1:38:10:0a:64:a8:31:98:7c:56:96:ba:e8:e6:b4:b7:
0d:e2:4e:32:1f:d9:5c:51:53:ea:06:47:b1:6f:67:a7:31:0d:
50:2a:f8:d5:8d:67:70:0f:dc:12:33:bc:17:29:80:6d:3a:19:
7b:d0:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:04:45 2025 by rpki-client