Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: ya0xhTMBTSNMoS3EHOY7uyoan45nNQLYVt88EVe+3t0=
Subject key identifier: 23:52:AB:EF:AA:F2:1A:48:5B:D8:B5:1F:64:F7:30:39:B9:27:16:19
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 01974F69FB2A1F1B116151F7268A9443D96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 12:00:34 +0000
Manifest this update: Sun 08 Jun 2025 12:00:34 +0000
Manifest next update: Mon 09 Jun 2025 12:00:34 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: Z1V1HINd5o7IANsTBLxTEdg5RAWviA1GD5a9wlEeLuA=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:69:fb:2a:1f:1b:11:61:51:f7:26:8a:94:43:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jun 8 12:00:34 2025 GMT
Not After : Jun 9 12:00:34 2025 GMT
Subject: CN=2352abefaaf21a485bd8b51f64f73039b9271619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:b6:78:5b:47:8f:d6:2d:7d:ca:49:a0:77:
c8:98:cd:de:78:16:8f:ba:d3:57:20:0d:ef:14:f5:
1b:3e:29:e7:1b:a7:1b:20:08:ad:77:f2:9b:98:13:
0e:7b:f9:77:55:51:2f:af:65:bd:d3:6f:9f:53:27:
15:51:c2:13:cb:b1:ec:6a:c7:23:db:77:12:31:3c:
77:74:83:77:b9:a8:db:4a:2a:1f:9c:54:f8:d7:63:
a1:00:05:14:f7:63:1a:65:31:8a:9f:93:cb:f2:54:
1b:4d:95:bf:43:11:a3:9a:d4:5f:d8:a3:cc:9c:a8:
05:cc:e5:de:34:1e:4f:b5:68:4b:c4:3b:03:ee:2e:
9c:7a:f1:58:ef:8f:5a:2e:69:82:87:c0:94:56:95:
b4:0e:f2:c0:ca:71:81:92:11:26:aa:a3:9c:31:bc:
52:21:ca:bc:4e:d5:1a:34:db:ad:85:48:ca:36:80:
de:db:a4:40:a4:7b:84:81:2d:6e:58:87:c1:2e:b4:
84:61:e4:83:c8:50:7c:c4:5d:97:e1:6b:39:5e:de:
c5:30:31:48:53:78:0a:a3:b5:65:66:67:67:0e:e8:
e0:d2:22:27:2c:85:60:2a:ca:38:0a:fc:56:f1:ff:
8e:17:51:d2:d0:37:3f:f7:27:d2:4a:d2:25:5b:f6:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:52:AB:EF:AA:F2:1A:48:5B:D8:B5:1F:64:F7:30:39:B9:27:16:19
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:35:70:4f:83:d9:d7:f6:9f:5a:04:68:d7:f6:d6:ae:bc:12:
35:2a:7e:80:ac:06:f2:ae:d8:d5:e8:2f:d0:3e:bb:4b:13:66:
3b:94:4d:5f:d2:e0:f1:06:32:1c:4f:f4:a1:68:f5:c0:e2:f8:
50:4b:b0:b5:e3:df:68:40:6b:8a:5b:d2:da:36:90:50:cc:be:
22:1d:cb:df:95:68:2d:47:c7:e9:68:21:5f:de:9f:ae:89:e5:
aa:43:cc:79:41:e8:11:6c:f9:44:4b:5a:65:e1:19:95:52:9c:
8e:23:cc:3f:c7:64:24:1c:20:54:44:77:3b:73:06:ec:9c:00:
60:9c:ae:e8:48:80:56:10:72:8f:92:0a:d1:66:0c:e1:ad:1e:
a1:3c:cc:2b:28:d8:bd:a3:92:c9:c4:c3:1e:cf:23:4a:01:e0:
c3:6e:f5:4b:82:94:1d:5b:5d:81:a0:a7:20:1d:df:8f:db:1b:
34:0d:ef:76:4c:c9:e9:c9:8c:bc:d8:14:d5:d6:94:e1:27:77:
0e:2e:c4:6d:fb:ec:a9:ec:ce:d5:bd:57:63:6a:b8:73:92:f4:
43:05:11:18:9d:31:1c:e4:12:f2:8d:0b:98:be:ba:0e:d9:0d:
67:32:03:07:16:d6:db:b5:a5:9d:f8:ce:b5:57:6d:18:21:82:
53:fa:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:18:50 2025 by rpki-client