Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: tMkViUQ/Ks7A/Jx2NHKRb5ml7Tak5PcwHXNwfVRzkNA=
Subject key identifier: A6:83:D1:C3:F0:E0:05:C7:7E:99:1F:D3:81:A2:E7:FF:6D:D9:F7:E8
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 01974AB1574057798C72E68B4C1A17552103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0BA5
Signing time: Sat 07 Jun 2025 14:00:25 +0000
Manifest this update: Sat 07 Jun 2025 14:00:25 +0000
Manifest next update: Sun 08 Jun 2025 14:00:25 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: gcZu11hR6KfnpFtfX8EwwlDY1mO5Im5/uUWyMEa+IP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:57:40:57:79:8c:72:e6:8b:4c:1a:17:55:21:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Jun 7 14:00:25 2025 GMT
Not After : Jun 8 14:00:25 2025 GMT
Subject: CN=a683d1c3f0e005c77e991fd381a2e7ff6dd9f7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:8e:60:13:b5:31:fa:91:44:ea:f2:3c:23:
ac:25:33:32:10:3d:3d:9a:8f:d4:c0:08:d0:c3:71:
66:7f:cd:86:a5:10:65:ee:eb:38:fd:b5:7c:be:1e:
6f:08:86:42:39:3c:48:d0:3c:b6:23:cc:a2:b6:a0:
00:1f:9b:06:d1:ba:70:e8:00:d4:69:b4:f9:3e:de:
20:99:7c:95:80:73:6e:d6:e9:e0:ce:59:e1:e2:69:
19:e1:7c:00:6f:f2:74:87:ff:95:98:a0:a2:4c:51:
ef:04:9e:16:ff:b7:c8:75:b2:3e:ed:a5:01:97:47:
47:bb:02:13:24:85:23:ac:a7:cc:29:8a:9b:16:4b:
d8:f0:0f:f8:c2:b5:f4:28:b7:ae:b8:95:53:58:b8:
e5:10:0b:a8:7e:f4:2a:cd:ca:df:61:4a:3f:24:65:
ad:d6:6a:5d:a2:b3:bc:41:59:98:a3:4d:24:bf:c5:
60:54:78:b8:15:92:9b:d5:bc:d6:5c:6d:33:d3:68:
b7:2a:e8:19:93:56:9b:2d:af:b0:91:2d:b9:46:a2:
0c:80:4a:8d:48:88:5c:37:21:c2:a6:0d:ba:61:e7:
26:8e:60:6a:73:b7:e0:89:1f:6f:91:2c:f4:af:80:
de:82:96:84:e2:b0:06:35:ba:5b:27:1b:a1:e1:00:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:D1:C3:F0:E0:05:C7:7E:99:1F:D3:81:A2:E7:FF:6D:D9:F7:E8
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:f1:6e:50:57:31:fb:56:32:30:49:da:64:e7:cc:73:fa:
b2:bd:e0:6a:3a:5e:0d:d3:89:a0:b7:b3:a7:f0:76:a4:de:22:
d8:7d:5b:58:15:bc:96:95:c2:03:d7:c0:d6:45:1a:26:04:28:
1a:0d:3c:96:cf:7b:39:d9:ab:79:8d:af:74:46:0e:53:7e:c2:
9e:02:7b:e9:26:02:fa:49:dc:14:d1:21:ec:c2:a8:90:ff:08:
a3:00:d9:e3:a2:5c:b8:ea:9f:99:e0:c7:96:d7:83:86:fe:26:
49:fc:fd:00:49:15:26:8e:a0:73:60:81:74:e9:dd:31:f7:6e:
18:13:f7:f9:2e:a5:b8:50:f6:d3:d4:e2:53:f7:72:0a:c9:c7:
a4:1d:bc:4b:3f:6e:d3:9c:6b:9d:f8:f9:9b:34:a2:10:bb:d6:
11:e5:5b:d4:50:86:74:5a:98:f5:22:db:96:46:e4:fa:57:63:
4f:7b:ae:77:1f:c1:c4:0b:19:07:a3:02:59:f6:9e:69:49:84:
8a:e9:be:a0:48:db:a3:ca:f1:bf:d9:59:be:6b:37:5b:23:88:
3e:99:bb:ea:b4:b9:27:9e:a7:81:2b:07:07:34:a6:ea:c6:07:
4a:e3:84:43:33:c4:8d:03:76:b0:15:77:cf:a8:7f:6d:b2:41:
94:a7:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:47 2025 by rpki-client