Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: 8+6xq8XYiO/CyY3nRBdn8PNE9rVapRt3Jl9cwf0GYCQ=
Subject key identifier: F5:B8:F5:2F:E0:EF:FC:2B:52:1D:BA:39:A5:2E:5B:1B:12:B8:AA:E5
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019750EAD87B3F0D82689592C84A8E8F6470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 19:00:57 +0000
Manifest this update: Sun 08 Jun 2025 19:00:57 +0000
Manifest next update: Mon 09 Jun 2025 19:00:57 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: /4wripbDZBkw5V+ZqsxPs9m7PKS/d0RpM4YMeEIeA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:d8:7b:3f:0d:82:68:95:92:c8:4a:8e:8f:64:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jun 8 19:00:57 2025 GMT
Not After : Jun 9 19:00:57 2025 GMT
Subject: CN=f5b8f52fe0effc2b521dba39a52e5b1b12b8aae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:0f:8a:85:4a:0a:95:ee:3f:65:5a:88:43:
d1:0a:ea:5a:77:aa:6c:46:2c:5e:2b:e5:e6:83:9d:
05:0e:42:76:f7:3a:12:c3:06:61:0d:84:80:f2:cf:
01:6d:4b:a4:0c:d2:ac:c4:13:ee:3c:d4:bf:98:e5:
34:28:b6:26:fc:09:d6:6c:ce:12:71:ef:51:40:0d:
1a:9b:b7:ad:15:91:5c:dc:ba:e5:b9:ba:94:57:07:
cb:16:a7:b9:36:07:eb:f7:fa:ef:a1:e9:c3:2f:ee:
27:d4:53:50:19:78:21:db:19:e9:29:6c:fc:8b:b1:
16:ae:d1:14:ad:a7:c9:fc:42:76:cb:57:12:5f:d3:
69:07:ba:a8:31:c6:24:da:a0:d2:23:ec:bc:4a:57:
f9:26:0b:05:d9:09:25:9e:3f:c7:03:75:bd:0d:af:
61:9a:2e:b0:58:58:3d:2c:e9:15:b5:0e:4d:35:c1:
ae:33:5c:b8:ca:fe:66:b6:df:e2:ee:78:ef:2c:9d:
26:0d:e7:b7:99:98:c2:8f:fe:48:f1:bb:7f:5b:74:
fc:8f:9d:88:94:89:2b:95:51:a3:af:97:16:ba:11:
a7:e3:13:93:f0:3d:30:d9:e8:9d:2a:cd:4f:53:c7:
34:e1:0e:65:58:09:54:ea:be:62:ad:04:ed:c6:68:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:F5:2F:E0:EF:FC:2B:52:1D:BA:39:A5:2E:5B:1B:12:B8:AA:E5
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:8f:a7:b7:44:a8:c1:c8:b2:f3:44:53:c2:25:3b:14:c5:
de:0d:b5:79:ef:2b:ae:70:26:7b:ea:2f:93:21:d8:8b:61:57:
60:98:4c:a4:5b:e5:a4:da:42:80:e8:49:ff:80:14:ba:65:15:
83:44:d6:d8:e2:d5:66:6f:79:ea:8b:88:36:50:e7:7c:6d:60:
c8:30:1a:75:84:0b:f6:09:9d:ae:fb:0b:48:f2:36:b5:e3:3f:
29:5f:ac:96:3c:ef:86:cc:9c:31:f1:99:19:69:9e:a2:bd:00:
d7:9c:4e:24:3d:4a:c1:12:5b:d9:40:0f:1f:6c:ca:b7:1a:5c:
e9:9e:4c:e7:25:c4:fb:ed:bd:44:1c:b2:27:bc:0d:aa:54:94:
98:ce:4c:ac:12:ab:db:26:44:2b:26:86:80:de:a5:0c:f6:ba:
45:6f:2d:a9:c0:7e:c0:69:59:dc:c0:29:75:46:3a:65:bb:26:
0e:93:23:d1:49:7e:54:05:c5:b7:e6:47:0c:7e:43:27:03:06:
c5:40:7d:63:e4:dc:c2:85:5f:4a:d9:8b:33:f1:57:90:25:fd:
05:1f:89:d2:cc:c6:da:87:71:a2:c3:bf:de:e9:18:9d:de:60:
9b:95:32:fe:3e:86:fc:19:ca:fb:ca:87:87:7a:2c:db:b5:3a:
a7:3b:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:17 2025 by rpki-client