Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: AghOWksoZoVmrxPm1qU3UIk8n/KtPLWMQOE7R30PLy8=
Subject key identifier: CF:14:AE:B4:74:17:B2:B2:FF:6F:9F:18:3C:E9:D6:0C:4C:9A:EF:0A
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 01974AE8C4E0945DD4E653AD43DE84BBC681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:58 +0000
Manifest this update: Sat 07 Jun 2025 15:00:58 +0000
Manifest next update: Sun 08 Jun 2025 15:00:58 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: QpzqDA2kTosloeIoRSYXO3pT+9+QIxPL1p+MZvGqlJM=)
2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:c4:e0:94:5d:d4:e6:53:ad:43:de:84:bb:c6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jun 7 15:00:58 2025 GMT
Not After : Jun 8 15:00:58 2025 GMT
Subject: CN=cf14aeb47417b2b2ff6f9f183ce9d60c4c9aef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:82:49:9a:28:71:4c:8d:a7:71:48:48:a7:
5f:5a:8f:fd:76:2f:97:bb:a6:6b:74:2a:c4:40:70:
cc:40:4b:ac:9b:36:ab:0e:d4:9c:7f:0e:fa:39:51:
ae:ac:73:6d:a5:1c:4e:c7:ba:fb:5a:86:84:61:26:
f3:27:04:bd:74:8a:80:35:27:6a:62:ae:27:f2:33:
e6:73:ae:a2:66:81:b7:df:e9:65:5d:2d:37:e8:93:
33:86:b3:41:13:ca:5f:36:35:06:82:15:bd:a6:06:
11:0c:90:79:ea:40:76:65:06:fb:da:e4:84:b4:e8:
35:eb:38:db:44:f2:8d:56:ec:b4:1f:32:47:2c:7d:
f9:d6:4e:ce:7a:55:54:a9:86:e3:71:39:79:bb:c8:
06:0e:37:87:37:5d:28:65:5c:be:84:a2:7a:1f:ef:
da:c4:71:67:97:09:21:f2:05:92:54:70:8b:cb:ac:
3d:50:e1:10:84:a9:a9:10:07:f4:23:ed:a3:99:b4:
1e:49:09:e7:7c:cb:2a:38:d6:f6:fe:9a:ab:bb:fc:
4a:67:54:86:3f:98:a0:3b:12:37:4d:61:95:80:af:
73:e7:6d:7c:ec:82:50:b2:38:be:2c:5f:f6:4d:80:
72:03:84:73:63:77:82:26:83:80:4e:6c:26:42:1d:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:AE:B4:74:17:B2:B2:FF:6F:9F:18:3C:E9:D6:0C:4C:9A:EF:0A
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:20:14:e1:e7:46:08:7b:3e:51:f7:78:0c:e8:d3:96:c4:
a4:8f:cc:9b:23:b6:97:de:2b:b5:93:5c:2a:65:56:08:a5:b6:
1c:e9:ed:f4:8d:8c:93:3d:ed:cf:1b:63:6f:8e:ed:98:36:4c:
41:1f:ac:8d:66:cf:cb:87:a0:1d:ac:0d:1d:44:dc:35:2e:fd:
91:06:1d:52:3d:e2:b2:62:38:b7:66:64:8a:25:08:d4:14:30:
1a:4f:02:83:ce:32:47:69:f1:f7:f6:f6:87:e8:22:da:d3:6a:
ee:28:8f:3b:74:ea:9d:f9:c2:cd:65:f0:4e:a7:b3:04:d2:12:
fb:92:82:82:47:bf:90:02:e5:67:d9:a3:8c:d7:3e:3a:12:1e:
c8:7a:06:34:90:27:04:b5:26:de:d8:ce:a7:b0:a2:8c:03:93:
56:05:41:4e:ef:0b:32:c2:b8:b7:5f:15:50:1b:dc:cf:73:d3:
cf:8d:b6:63:e2:eb:80:ee:51:3d:64:b5:cc:1d:c1:eb:ac:7b:
8f:6b:59:fc:a7:ec:74:06:da:c8:fd:84:eb:12:02:7f:53:5f:
49:9f:5d:0d:f3:c6:3d:65:66:dd:2f:75:c5:92:37:28:62:50:
9e:f0:09:4c:3f:17:19:2f:4e:c1:f6:28:c7:70:aa:c5:5c:e3:
b3:a2:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:19 2025 by rpki-client