Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: 3M8D99E5wam8Lcoubf1sRR3StyB1C9SBUFJponPw9WU=
Subject key identifier: 04:16:C9:96:B7:62:0B:92:37:25:48:61:80:16:5D:DD:C2:1C:5B:64
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 0197488C5BFEA21CEC08AA2BA9BD0A2334B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1594
Signing time: Sat 07 Jun 2025 04:00:47 +0000
Manifest this update: Sat 07 Jun 2025 04:00:47 +0000
Manifest next update: Sun 08 Jun 2025 04:00:47 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: GyQcbQJnV1tpMeOJoPg2QjybZ8Khrx55WGtz1oISXLY=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5b:fe:a2:1c:ec:08:aa:2b:a9:bd:0a:23:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Jun 7 04:00:47 2025 GMT
Not After : Jun 8 04:00:47 2025 GMT
Subject: CN=0416c996b7620b923725486180165dddc21c5b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:d5:3a:9b:cf:9e:7f:b8:dc:54:fd:1c:13:
cf:d5:05:04:46:9f:d1:9e:ee:92:5e:2e:b6:ca:e0:
69:35:1e:43:a3:3c:6c:89:8a:3b:15:aa:78:25:04:
0c:8d:9f:08:e8:23:1a:22:35:2f:a0:22:17:e6:b7:
e4:bb:5a:aa:f4:3a:c3:fd:ff:d6:e5:f0:cf:76:22:
9f:32:fa:9f:b5:4e:87:0a:b5:e3:51:14:86:8a:a3:
f6:0c:f6:ca:68:37:93:64:57:d4:2b:00:a0:42:4f:
ca:a5:03:e3:10:2a:51:ad:8c:5a:4f:74:4a:5a:63:
a2:b4:f2:75:9d:b4:f5:3b:de:63:d2:e5:d2:41:48:
8a:6b:ce:0f:3f:b5:34:9b:00:f6:a4:f6:40:82:3e:
4d:5e:d3:76:83:65:da:e6:ff:1c:52:a0:69:c0:8a:
46:bc:c8:40:52:32:aa:0a:85:9e:84:80:6d:3a:45:
83:4e:fc:4e:fe:ea:6d:e9:39:4c:60:04:78:0b:61:
0b:53:8e:6d:22:ed:b8:5f:f5:f0:89:9e:cf:c3:98:
b1:3e:10:03:b4:31:b3:d0:1d:73:58:97:0c:5c:80:
58:bf:7f:b2:02:09:53:74:57:c4:5c:88:6c:28:6a:
e5:3e:7b:65:6f:e9:9e:84:2e:e9:c1:3b:df:ca:21:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:C9:96:B7:62:0B:92:37:25:48:61:80:16:5D:DD:C2:1C:5B:64
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2a:a8:73:ea:75:c7:65:b3:17:82:75:1c:e4:91:f7:29:48:
5e:47:50:4a:b7:f7:7c:20:a7:62:49:6c:29:f4:9b:a5:4c:c4:
8d:10:d4:dc:ae:0b:e1:4e:26:1d:e4:04:20:67:0b:1b:2b:d7:
af:68:a0:2d:44:9e:c5:3c:ed:97:79:5e:d3:8e:05:b1:96:23:
0c:d5:d4:c3:e6:ca:07:b8:ee:26:f0:7c:28:db:12:4f:50:5c:
54:a1:22:8e:4e:de:23:ab:fe:ed:56:d1:a1:e1:ce:22:72:88:
52:a1:0c:56:99:17:0c:eb:31:17:23:5f:05:d2:86:89:8b:cb:
21:8f:f0:a4:75:39:af:83:70:52:26:ec:2f:c0:1c:03:a0:17:
6e:74:bc:1a:f2:f6:23:07:ea:64:83:9a:ab:3c:46:25:e3:57:
a3:ff:d4:35:06:65:62:9f:8a:7c:78:c0:68:fb:8d:e7:06:96:
cb:61:4a:1d:9f:d7:ac:f1:55:64:12:91:e6:5d:75:5c:c5:2c:
1e:ab:69:e1:54:8c:fa:7f:f7:d4:7e:3e:5a:f2:70:4f:59:90:
47:ab:74:ea:24:2b:3e:57:00:95:c3:09:a8:a8:8b:36:de:b4:
df:02:85:ed:51:4f:ee:50:1b:5b:63:34:18:4a:ee:f5:70:b3:
c7:bd:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:14 2025 by rpki-client