Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier: jcmQ8S3yycsnD2L3RaGjlWy+eZnYjtN7rnF27EKiXDg=
Subject key identifier: D8:B2:DE:6B:BB:47:AA:A4:E0:D0:67:64:D1:CA:09:AE:70:96:F0:46
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial: 01974B1F8CB3921FAA076FF4F4E55041A115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number: 1233
Signing time: Sat 07 Jun 2025 16:00:48 +0000
Manifest this update: Sat 07 Jun 2025 16:00:48 +0000
Manifest next update: Sun 08 Jun 2025 16:00:48 +0000
Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=)
2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: 4iZc6enklBetYitW2pfrDjbFrOk5yWRhdqupnEOKzis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:8c:b3:92:1f:aa:07:6f:f4:f4:e5:50:41:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Validity
Not Before: Jun 7 16:00:48 2025 GMT
Not After : Jun 8 16:00:48 2025 GMT
Subject: CN=d8b2de6bbb47aaa4e0d06764d1ca09ae7096f046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:e6:bd:78:ff:92:56:c3:72:2f:31:d6:20:
04:3e:ce:e9:32:ab:db:54:b0:99:0c:f6:55:e0:4a:
9e:12:78:08:39:38:22:97:47:92:a2:97:4a:12:36:
29:5c:85:99:1c:7e:e3:07:37:75:ba:36:a5:a9:48:
e4:a1:87:e8:54:c2:5a:13:4a:30:34:97:51:5f:52:
ae:32:97:ab:d9:81:40:b9:fe:a4:b7:a7:54:72:d7:
44:58:3a:48:d9:71:7c:22:dc:cf:94:c8:17:71:da:
3e:a0:6c:09:9c:49:00:18:9f:90:b7:90:dc:64:10:
88:ae:5f:fa:26:a7:91:e2:4e:bb:25:88:58:ea:4d:
ab:26:12:f2:d8:cb:e5:2e:a9:61:b7:21:95:30:c5:
1a:07:90:11:e1:28:e2:3a:e4:65:1b:68:d0:90:1b:
bd:d5:de:63:8f:36:9d:78:f1:12:b9:47:15:96:93:
02:c8:f1:b5:8c:74:be:93:5f:6c:02:31:1a:ee:a0:
cf:bd:b2:99:29:0c:e9:3b:6a:79:cd:f4:af:6c:43:
67:c1:39:79:fc:4c:9b:01:15:b2:16:ea:6e:1b:70:
f0:57:0c:86:de:a4:5f:a2:4a:db:c3:b2:6d:6d:aa:
02:6a:c2:10:e0:60:f9:e1:f1:c9:76:d0:0f:dc:71:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B2:DE:6B:BB:47:AA:A4:E0:D0:67:64:D1:CA:09:AE:70:96:F0:46
X509v3 Authority Key Identifier:
keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d9:c8:13:d1:2d:cc:ac:0b:8e:81:12:e1:b7:e3:e0:ca:ea:
51:4f:62:d7:52:12:17:e9:ef:99:9d:d6:73:0d:4e:83:b8:42:
fb:ef:1a:35:a8:b5:fc:f0:fc:13:a2:08:6a:88:0d:20:4d:5a:
51:bf:16:10:79:18:50:5a:32:44:da:40:b4:c1:a7:73:ef:ca:
6d:f8:dd:17:bd:4e:4d:20:12:4a:7b:f7:b4:57:c3:cf:ae:83:
6f:30:b7:41:f7:09:c1:f5:9f:df:ff:13:59:69:38:c8:d9:aa:
db:bf:bc:d4:f3:79:8e:ff:40:c9:13:af:9e:0a:67:a1:7e:9c:
e8:67:64:a0:27:ce:9b:f3:22:54:bb:73:b3:ab:95:7b:14:ea:
42:44:37:e5:e2:18:f3:5f:26:3d:20:b9:65:8f:f5:74:ab:dc:
af:6f:e7:54:e5:85:44:d7:00:ce:34:b2:a8:31:17:03:23:7e:
17:c3:ed:d0:13:61:dc:ee:4a:2d:a9:c1:30:7e:88:db:cd:bd:
ea:4b:78:46:1e:34:5e:c3:68:c4:70:66:6f:b0:a9:51:b9:fa:
3d:5e:a3:e2:eb:57:a4:70:7e:7f:1d:78:e8:75:c9:95:cb:08:
f3:38:d3:24:1f:05:8d:b5:ef:df:d3:75:06:bb:c7:8c:6b:83:
cd:db:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:22 2025 by rpki-client