Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: gWZlILkBMqE9JmcWJYUJO+3ceooS/v3hVyvmNtJ3NHE=
Subject key identifier: 59:94:A1:1C:57:27:98:71:B5:23:ED:18:D2:C1:0F:37:A2:71:4C:1C
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 0197499F6233D1FC1A3E9A950232882BECDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0EB5
Signing time: Sat 07 Jun 2025 09:01:11 +0000
Manifest this update: Sat 07 Jun 2025 09:01:11 +0000
Manifest next update: Sun 08 Jun 2025 09:01:11 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: GOMXlesWZdBiHr+aP0tvFdYdcObJWPPo1pAraQQltIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:62:33:d1:fc:1a:3e:9a:95:02:32:88:2b:ec:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jun 7 09:01:11 2025 GMT
Not After : Jun 8 09:01:11 2025 GMT
Subject: CN=5994a11c57279871b523ed18d2c10f37a2714c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:7b:07:29:a7:44:3f:e7:73:55:83:f4:64:
3d:b2:c6:b5:f3:12:b3:cb:53:eb:2d:0b:be:6a:01:
22:86:cc:f3:0d:c6:33:5d:f5:c0:4b:dd:30:e1:80:
ce:ef:65:60:0a:50:e5:94:cf:01:e1:aa:2e:c5:f8:
ed:86:65:8c:41:15:84:68:85:9a:e1:07:ce:90:2c:
df:d1:ae:6e:5e:c6:d6:df:c9:1f:97:6f:bc:2b:15:
34:1e:1d:44:bd:b6:10:4c:3b:7b:88:27:57:78:c0:
1f:6a:47:33:ac:8e:08:ae:50:86:d9:ad:cb:98:a2:
96:99:d8:57:0d:ec:67:59:d9:0a:54:c4:ba:23:0d:
29:7a:11:30:09:87:15:97:4c:6d:d6:ba:fc:13:80:
6d:c2:65:9e:05:02:1b:25:d4:51:69:0b:f5:68:de:
ca:38:b0:36:87:ce:12:ab:31:ee:d8:50:30:66:7c:
2d:8a:f1:3b:76:40:37:bd:67:24:ca:bc:80:46:2b:
ee:a2:31:84:5d:8b:5d:72:d5:b5:b7:96:41:a8:09:
49:75:0e:c7:4f:52:51:57:b5:f5:46:72:9e:0d:58:
35:5f:b7:38:37:36:d8:0a:da:84:42:4f:34:e4:3b:
8d:c2:4c:5c:5d:ca:75:a6:4b:aa:0f:e3:92:2a:56:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:A1:1C:57:27:98:71:B5:23:ED:18:D2:C1:0F:37:A2:71:4C:1C
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:7a:c0:ff:e2:5e:11:b3:c3:e2:b2:b1:8f:b7:57:86:f6:
54:73:e2:46:32:56:48:2d:5d:f9:ba:11:79:fb:fc:b8:a0:bd:
4a:6d:81:b7:3d:3c:b5:15:2e:62:69:8b:56:90:9f:25:9d:c1:
00:77:e8:00:32:9f:50:19:66:2d:85:98:18:b1:3c:2c:17:57:
d2:31:32:a5:d8:a3:90:41:d5:e5:45:7b:cc:e0:a7:89:1b:10:
87:91:52:0e:09:8a:86:50:7d:e0:ba:dc:04:c5:84:93:9e:5c:
12:0e:8e:9f:35:08:ad:86:03:c1:c2:c0:81:aa:50:85:78:94:
8f:7b:7e:be:7b:5b:27:b5:c2:5b:9b:45:7f:a6:e5:ff:e8:66:
3d:b9:8a:70:b7:5f:7a:bb:6d:92:94:ef:0c:be:5e:0e:e6:61:
17:e0:ef:22:5a:b7:4e:7a:09:90:d5:52:d9:c7:a3:33:45:87:
87:ad:62:b6:1b:a2:7a:25:67:95:fb:93:e9:8f:bb:18:dc:a3:
bf:6a:e3:21:0a:47:d9:98:58:43:c3:64:55:dd:02:e3:3c:fe:
50:5f:62:81:13:6a:f7:b1:10:69:6a:04:ef:24:5b:f5:01:82:
f7:e7:92:e6:c2:d1:79:7c:2c:3b:3b:14:cd:90:65:ac:fd:e3:
34:ac:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:41:29 2025 by rpki-client