Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: cYmE8bwhQtrOR4emyVy7Ee1j7HimCm9beiXeznbkNO4=
Subject key identifier: F7:33:7D:20:D6:2D:E4:12:7C:98:FA:FB:12:F7:12:43:76:83:3F:90
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01974FD7A718CCFFA41B39ED19D9857F13B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 112D
Signing time: Sun 08 Jun 2025 14:00:22 +0000
Manifest this update: Sun 08 Jun 2025 14:00:22 +0000
Manifest next update: Mon 09 Jun 2025 14:00:22 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: furzSzIEZtq9eaOrIplW8IA29ktwgz3P/yMNqz3cm4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:a7:18:cc:ff:a4:1b:39:ed:19:d9:85:7f:13:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jun 8 14:00:22 2025 GMT
Not After : Jun 9 14:00:22 2025 GMT
Subject: CN=f7337d20d62de4127c98fafb12f7124376833f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:72:c2:65:51:a0:2c:76:71:e1:f7:16:ff:
c6:fb:86:01:55:db:d4:2a:9d:ae:ef:12:10:35:bd:
f6:97:90:23:f5:ff:a2:00:55:ef:4f:a5:4b:9c:d1:
df:b1:14:f0:e6:37:db:a4:d0:65:2d:d4:97:65:55:
6b:3e:89:c9:d0:42:27:89:ce:d7:37:dc:d2:90:42:
4d:f4:c3:5c:bf:c6:a7:9f:e6:e3:ee:e1:4a:64:ec:
7b:d9:f8:74:b5:14:23:f1:59:7f:86:49:88:b0:96:
60:ed:01:5c:a6:62:0e:cf:66:c6:fb:af:d7:6b:53:
65:d6:64:54:54:0d:2a:31:cf:fe:e5:bb:dc:e7:62:
a6:19:0c:4c:b8:4b:02:d6:ac:98:8b:a3:35:ba:ae:
f0:2f:b9:b7:25:35:34:04:5b:d2:36:2b:ba:1d:70:
77:fa:69:ea:6a:3f:6f:19:d3:d5:51:9a:8b:1b:f9:
6b:04:dc:a7:22:07:b8:3c:ad:43:ec:08:59:6b:8d:
70:82:38:41:af:8a:8c:6a:40:6b:35:19:a3:d0:79:
41:16:c2:18:7c:e2:ab:69:ea:ac:ef:94:a2:e6:5b:
44:a5:c2:72:ac:d2:28:c5:55:59:54:87:06:e0:b2:
87:43:aa:29:64:f9:b9:09:ad:4b:a1:65:06:8f:f5:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:33:7D:20:D6:2D:E4:12:7C:98:FA:FB:12:F7:12:43:76:83:3F:90
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9e:f9:28:0d:ac:1d:88:a2:4c:02:be:a4:82:6f:6a:e3:da:
1f:c3:29:e7:a9:02:44:e9:b6:11:8d:ca:a5:8b:e0:65:2c:66:
89:f4:84:e1:d7:5b:d3:7a:37:f2:78:09:f8:05:85:29:b4:4d:
f6:ad:11:1f:72:c3:47:28:70:6a:d9:d9:4c:d7:6c:79:72:b7:
aa:3e:04:3a:e8:aa:f3:e7:80:d2:ef:f2:c1:7c:61:b9:68:8f:
ad:46:ed:eb:11:87:e6:2e:6d:bf:a0:47:62:5f:be:ae:62:e5:
7e:f0:85:0f:d2:a0:0f:9d:cf:82:0a:c9:89:87:dd:a6:0a:45:
75:d4:4f:e1:5a:b6:d7:b3:19:e7:23:a7:82:b8:b6:5e:9f:1c:
75:ee:98:e6:4f:51:b8:ae:db:2c:5d:3d:0f:62:99:ea:bd:62:
24:a3:38:9c:1c:38:58:b7:86:0c:46:21:7e:de:cc:7d:2b:8b:
4d:14:84:ec:89:14:47:a7:f6:ca:c6:11:27:04:6b:3c:9f:70:
3e:02:4a:98:3d:3a:69:77:0a:29:09:75:ac:00:f1:89:88:f2:
1b:f6:18:12:6f:3b:73:b3:53:2b:f4:04:c7:ba:81:0c:82:02:
d9:28:55:57:a1:94:5e:11:f6:21:ec:e0:e4:90:64:b9:e9:87:
81:85:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:41:25 2025 by rpki-client