Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: t0T3EFuVKQ+EHYhpFsbE8fc7zArhzU+Dj2muoGA21nA=
Subject key identifier: 55:B6:ED:0B:30:D9:68:C5:5E:E6:67:CC:58:0C:83:C1:66:08:D9:97
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019747E78E4A20E4DCE65C9A89496B5349DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 15BE
Signing time: Sat 07 Jun 2025 01:00:46 +0000
Manifest this update: Sat 07 Jun 2025 01:00:46 +0000
Manifest next update: Sun 08 Jun 2025 01:00:46 +0000
Files and hashes: 1: 4xDjMGoR5cxZD0TEt45OTNLuzZ4.roa (hash: aWtnbMWrytraTfwmFZQXH9y0uPlTO0CdQ7LWoLXK164=)
2: J8HqZbweBSBfotj9M3AMH0o24CY.roa (hash: KkFoXwUHnXFgQiJUTdylT6bFXV0tnmXRuocNWtuhH7k=)
3: aXs8DBYHqH16kFI25mAmO1bJxx4.roa (hash: d1LoCC9lmf7ZBBsN52kpeKsNgpbykeADMERL6qdd4Bg=)
4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: bh+QoExnvzcIYaGLOBeWdNK98nhI/kry+a3OjrPyX7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:8e:4a:20:e4:dc:e6:5c:9a:89:49:6b:53:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jun 7 01:00:46 2025 GMT
Not After : Jun 8 01:00:46 2025 GMT
Subject: CN=55b6ed0b30d968c55ee667cc580c83c16608d997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:55:f9:d1:2a:8d:a5:87:d9:e6:e9:c9:b6:
f0:31:95:83:9b:bf:08:1c:0a:ef:0f:8c:80:9e:86:
2e:90:3b:fc:d1:e6:41:1c:8e:a0:01:88:42:83:10:
3d:ed:59:88:15:5c:bc:66:54:7b:17:65:91:82:13:
71:6a:a8:8d:56:db:2b:6d:fe:1e:6e:58:2c:2c:f1:
ab:f6:c2:ad:d2:9f:09:06:b6:b0:18:ec:9b:1d:57:
82:40:30:86:85:9d:32:ee:d3:ca:8d:73:8c:39:e8:
48:e8:63:4d:33:b1:16:98:2b:d8:88:66:8d:93:c2:
c0:62:1f:22:05:ce:ac:cf:4b:2d:e2:4d:d9:56:ff:
ca:cc:8a:c9:7a:9a:ee:d7:16:4e:1b:b6:77:81:72:
28:a9:2c:03:7b:67:a9:f9:0d:93:9a:7b:4a:aa:24:
5f:a4:09:86:1b:4c:f4:a7:a4:44:fb:87:3d:23:06:
02:65:c8:60:9b:24:ea:6e:22:3c:5f:a6:d0:5a:59:
c0:2e:03:42:48:e4:8a:b8:d0:66:cc:25:0c:4f:b0:
cf:96:0b:0a:e0:f4:0e:88:29:35:dd:86:ad:db:57:
9a:17:49:18:65:94:12:ca:cb:f0:cb:ea:35:84:ea:
c7:30:38:f7:57:1b:32:a1:b8:bc:af:b3:81:d8:00:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B6:ED:0B:30:D9:68:C5:5E:E6:67:CC:58:0C:83:C1:66:08:D9:97
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:50:52:44:53:89:1a:b4:3a:68:6b:4b:f9:5b:1c:7a:99:
95:b7:18:09:75:09:69:19:bb:de:0c:10:60:48:80:1c:05:91:
fd:2f:83:fc:9b:28:41:6e:98:fd:48:23:71:e6:11:9d:00:fb:
d4:a5:f4:1b:da:bf:16:ee:0c:10:2f:a4:6e:72:2d:b9:20:1c:
c9:b9:fa:4f:fd:87:d4:02:7b:10:d0:02:50:4f:65:35:bd:9d:
d6:1c:4e:3c:fd:bd:0b:86:4a:7e:bb:70:f1:d0:e4:73:ad:15:
9a:f0:58:25:07:56:7b:4c:04:52:a3:74:31:d2:ed:f5:12:82:
80:52:d2:61:38:da:8c:dd:ee:64:2a:db:3e:cf:37:c5:a8:ab:
2b:64:e8:71:8c:b0:50:7c:3c:07:cc:de:8b:ca:73:ab:b7:3e:
53:c7:94:ea:52:d2:4f:49:5c:19:20:8c:76:63:a0:e1:1c:94:
a7:a8:03:ae:2e:96:f9:b6:90:65:19:8e:4e:84:58:64:27:65:
31:10:76:ea:6e:bf:c2:4f:cf:1d:70:55:c9:83:27:50:9a:93:
b5:c6:0b:9c:c1:e6:a8:6a:2d:65:17:65:2b:7f:f9:c8:4b:9d:
ff:16:82:7d:2d:ad:a2:42:83:0f:78:01:b3:95:8a:12:62:ef:
03:cc:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:16 2025 by rpki-client