Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: WJVC2UwTomy28AM2mT9FNouR+M1BhVGkb46JhL9ihhQ=
Subject key identifier: 7A:0C:F5:A2:67:18:DF:D8:DB:2E:30:B2:2D:11:89:3A:B4:F0:A3:1C
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 019753102ACC4F52815DB5D0969C9AC5CC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 05:00:57 +0000
Manifest this update: Mon 09 Jun 2025 05:00:57 +0000
Manifest next update: Tue 10 Jun 2025 05:00:57 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: XqxFiNQeE7eXPerjP07+MqyOU7tsIZPraVvGh9onE4A=)
2: GBHgZs5smXIHM4FYLqRTdebAY54.roa (hash: 8eoGRtWR94CvV+AUeQO0MQrawByEe9oxj8H6brsnZqU=)
3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:2a:cc:4f:52:81:5d:b5:d0:96:9c:9a:c5:cc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Jun 9 05:00:57 2025 GMT
Not After : Jun 10 05:00:57 2025 GMT
Subject: CN=7a0cf5a26718dfd8db2e30b22d11893ab4f0a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:dd:da:3b:86:8d:eb:df:50:5c:25:bc:02:
a9:64:bd:fa:52:e9:21:d8:fa:5f:57:51:d5:c6:3f:
3c:af:de:f1:d2:d9:37:f3:c2:9b:7c:7c:74:8e:3b:
19:7b:97:1c:67:a9:7f:98:ac:cd:df:6a:ce:cf:73:
4f:0f:42:d7:15:7c:a8:c0:e7:47:91:e9:ec:fc:66:
f7:0c:85:94:25:37:3a:b4:c7:1d:b6:42:85:bd:f3:
96:27:1b:91:16:e7:4d:15:3d:2a:ce:7e:59:eb:71:
26:ff:9b:72:ac:54:99:59:98:51:5e:f7:30:19:8e:
df:5a:ba:6b:78:35:04:a4:b1:b5:96:72:bd:c2:58:
92:0d:e0:c9:c7:61:d6:1a:11:09:a0:ff:49:a8:5b:
f9:25:d2:6a:c6:a5:2b:52:88:b5:5f:cb:58:65:79:
61:63:35:67:28:b2:b4:e7:67:f9:f3:0b:bf:22:f4:
9e:a5:de:cf:66:1f:a8:8b:40:ec:72:77:a5:9d:d9:
75:45:a6:0d:72:bb:23:1d:7e:21:1e:c8:e7:23:1f:
ef:a8:22:2e:75:92:df:b6:4e:f2:fa:81:1e:6e:92:
32:bb:05:e4:89:14:85:28:ed:40:99:64:a1:25:53:
ab:d4:b7:65:af:0f:de:3a:63:64:63:b7:2b:9e:55:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:F5:A2:67:18:DF:D8:DB:2E:30:B2:2D:11:89:3A:B4:F0:A3:1C
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:ab:4f:c8:43:e2:9c:ae:df:50:63:57:38:6f:a0:2a:a0:
51:b9:72:d8:cf:3c:ad:48:a4:4e:c3:1e:c4:86:5f:1b:98:f0:
3f:ce:51:37:a0:8a:ff:10:95:53:77:a1:38:36:31:85:3b:3d:
81:8c:98:66:7b:35:2c:2f:f6:d7:b3:c4:fa:18:30:20:fa:91:
fa:69:80:54:ec:9a:de:d6:a0:fa:f0:5e:4c:e0:62:e2:7b:b4:
20:8b:52:ab:99:a6:44:1e:69:c5:a3:67:9a:38:63:f2:ea:58:
d6:d6:5a:13:e4:9c:13:8d:55:08:3d:ef:07:34:f7:ac:64:47:
68:36:4c:67:06:15:e6:e4:75:6e:9a:df:9d:cc:39:1c:dd:dc:
13:67:31:79:70:15:c6:83:8e:fb:c8:cc:d0:4b:7f:82:d2:3f:
04:1e:5e:e0:b3:ee:18:44:8f:fb:73:61:97:8e:a1:75:36:93:
ae:5b:28:5e:a2:94:9e:42:26:a3:ca:ac:9d:00:d5:f9:83:21:
12:1b:b9:0b:dd:38:99:ee:2b:96:7d:89:df:c1:4d:73:d0:80:
ee:9e:51:ff:ab:04:02:93:ce:a9:02:10:9c:80:80:26:15:07:
f4:8b:36:30:cc:70:be:23:83:cf:6d:9d:7a:f4:62:1e:8e:e8:
32:1c:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:36:57 2025 by rpki-client