Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: C5Ty7dfC1bcjOsncjgg9xPQqWOuiiu1Zgc0nRZM+bCM=
Subject key identifier: 15:6B:62:D6:DA:64:AA:81:01:FC:19:7A:C2:79:B1:E8:E8:04:A7:39
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 01976C9931E92229D293FB85847B7AD7F6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 023A
Signing time: Sat 14 Jun 2025 04:01:08 +0000
Manifest this update: Sat 14 Jun 2025 04:01:08 +0000
Manifest next update: Sun 15 Jun 2025 04:01:08 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: 2HhZSTSfAbBKnmKpFxvSQ4vtEYQ++R3BMEcYsMaziY4=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:31:e9:22:29:d2:93:fb:85:84:7b:7a:d7:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Jun 14 04:01:08 2025 GMT
Not After : Jun 15 04:01:08 2025 GMT
Subject: CN=156b62d6da64aa8101fc197ac279b1e8e804a739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:7d:1f:39:e2:23:57:0b:79:06:8e:c7:f9:
5c:be:ed:95:0d:a9:da:b2:e7:20:70:d2:6f:f3:39:
17:34:64:66:98:48:59:00:d9:d4:82:47:59:02:e4:
42:22:22:ad:a1:ff:04:d0:1a:ae:d0:a7:27:73:c0:
b1:b3:49:7e:36:49:f7:c6:cb:17:f3:44:fa:55:d4:
0e:a2:2f:28:29:5b:13:fd:52:7a:c1:1d:b1:69:e4:
10:71:99:23:38:66:74:b6:a2:09:04:68:ed:9b:a3:
3a:b2:29:5c:22:9a:0f:f6:88:2b:73:42:bf:b0:aa:
53:f7:b1:17:56:1b:a0:02:c1:f7:d5:91:6b:26:d2:
bb:6f:4b:e8:82:8c:34:a1:f1:d4:b9:60:a1:1a:68:
c3:06:eb:08:b6:ff:06:5f:ac:1a:b3:25:91:9a:7d:
c0:92:78:b2:9b:17:e3:7b:a8:9f:0a:2f:9a:82:8b:
c3:b6:d0:d1:22:d2:78:ea:55:d9:dc:c6:ab:56:cd:
71:07:87:87:08:22:d6:57:b4:6e:8b:f1:a0:25:52:
34:b8:c9:fa:7f:dd:e3:9c:18:41:32:59:d0:e4:42:
28:f1:92:97:4c:7b:fe:ca:2e:07:28:fd:47:a8:d6:
bf:1d:e9:f7:cc:64:6a:3e:0c:9c:fc:a3:25:da:77:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:62:D6:DA:64:AA:81:01:FC:19:7A:C2:79:B1:E8:E8:04:A7:39
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6b:92:b0:6f:e7:2d:3a:d9:4f:c3:0e:cb:96:34:e1:44:15:
c1:09:07:39:3d:02:cd:c2:7d:1f:95:7a:23:ea:93:a1:ca:2b:
1c:02:27:5c:03:62:cc:9f:d3:50:e2:3b:51:3e:ed:2d:49:b4:
d5:ae:62:62:4f:12:ff:9d:0f:d9:e3:2d:de:55:71:14:e8:cb:
c7:e8:60:b8:4a:67:a4:2b:d2:79:05:0a:f2:07:db:73:7b:45:
d8:d2:fc:1d:b7:e8:9c:17:be:40:3a:70:9e:e6:14:a5:45:13:
9c:5f:93:61:d7:19:3f:8e:21:18:9c:bc:4a:28:84:fc:c1:66:
8a:a8:50:c0:a2:09:b0:79:67:19:75:2e:bd:68:6b:d4:81:3c:
3e:5c:63:a4:39:5f:ab:eb:4b:6a:42:cc:73:55:cb:bc:5f:ff:
92:39:18:cb:0e:03:1a:01:77:cd:69:c4:cf:a9:88:e5:1d:78:
cb:94:57:a8:48:a5:50:84:c5:5f:df:47:66:b1:44:89:5a:76:
b5:c1:cb:13:c6:59:70:40:e5:c0:4f:10:f4:c3:ef:44:ea:98:
78:ab:a9:78:31:bc:e3:b6:90:d4:3e:64:f7:9b:88:61:52:7d:
7d:29:84:6f:fb:5a:42:ef:bf:f8:7e:16:66:83:0d:04:ec:20:
6d:38:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:01 2025 by rpki-client