Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: 80GdCAqMrN64LI4dmKjG44Bl3Hlx9ci26zZOawLlen0=
Subject key identifier: 95:94:CA:41:97:79:30:0D:61:60:86:DB:60:9E:93:17:8F:CE:5F:FC
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01974B56AF4A63E0AA0C4723EB0D746C20FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 17:01:01 +0000
Manifest this update: Sat 07 Jun 2025 17:01:01 +0000
Manifest next update: Sun 08 Jun 2025 17:01:01 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: aTv4mNoaxs/btKzBurxRDGcj0fnsMsWD4Srn1+HrkVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:af:4a:63:e0:aa:0c:47:23:eb:0d:74:6c:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Jun 7 17:01:01 2025 GMT
Not After : Jun 8 17:01:01 2025 GMT
Subject: CN=9594ca419779300d616086db609e93178fce5ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:f9:37:dd:8c:a7:0b:c6:cf:2d:ed:24:48:
8e:f5:98:fd:0e:2c:b0:bc:81:86:b0:b1:6d:83:f8:
ff:f2:94:00:24:9d:56:a2:8e:11:77:bc:20:68:f9:
f2:3a:4b:2c:bb:1b:54:0b:49:36:3a:e9:c5:8e:58:
96:2e:17:b7:ff:0f:6d:1a:32:df:75:18:23:6d:c0:
24:0b:02:41:6e:cf:ae:52:29:b3:81:93:2f:d2:c4:
a4:be:51:fe:26:43:71:f8:8a:e6:44:77:7e:39:1b:
54:c4:95:86:b3:bb:d8:44:fb:15:63:4e:d7:38:03:
2a:76:b2:ef:94:1c:09:86:c9:fd:83:65:25:4f:51:
da:bb:d9:85:e0:51:96:9e:b7:e9:21:aa:90:9c:54:
07:33:d7:e1:66:80:65:9a:11:30:dc:0e:6d:e5:0c:
08:7b:84:46:19:f6:39:58:3a:85:18:8b:97:07:d8:
c9:73:d0:e5:d5:31:08:1f:83:c8:72:15:17:ff:e6:
72:ad:38:b6:dc:7e:73:c1:5c:90:6d:95:95:18:ab:
e8:cc:22:1e:8a:ab:cf:27:a8:28:dc:6e:56:52:43:
83:f7:15:ae:87:d1:dc:07:6b:16:3b:7b:2a:ff:aa:
8b:2e:d6:90:82:ec:09:95:08:af:a7:ab:f1:a7:30:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:CA:41:97:79:30:0D:61:60:86:DB:60:9E:93:17:8F:CE:5F:FC
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c9:b0:d1:1c:8f:8c:45:16:01:c9:ea:11:6e:3c:03:da:f0:
11:15:55:8e:49:fa:ae:56:17:a2:78:bb:ef:c3:67:e2:23:34:
29:74:4b:34:9d:93:47:e5:d6:bd:87:ee:6b:3a:44:c1:d8:a5:
dd:00:21:64:9e:ae:38:b8:63:57:8f:08:b9:77:ca:00:5a:a8:
c0:3a:8b:0f:e8:df:0f:11:fb:5a:e2:6b:6a:ea:6b:ad:c5:6a:
07:1e:99:80:97:b2:ba:74:27:78:c8:d6:7c:47:81:92:10:1b:
fb:83:e0:45:1d:59:b3:be:49:73:a6:8e:db:29:0b:01:c8:5e:
46:6c:f1:51:91:94:c0:16:1a:11:76:68:a1:2a:c3:26:d5:e9:
ca:a8:dc:04:99:eb:1a:83:39:28:81:13:5c:53:f7:24:31:29:
87:11:fa:12:19:7b:07:3b:e3:70:60:11:35:64:67:2e:58:9a:
6b:db:95:32:a2:a9:59:e7:00:ba:5d:74:4b:4b:65:9b:9a:65:
fd:f4:e5:e9:cf:d4:0a:0c:00:c6:85:4b:1e:d4:74:81:1e:4d:
e2:cb:a6:c1:cb:08:34:e0:55:23:2e:ec:00:8c:0f:e9:81:59:
21:02:cc:66:4d:83:58:fb:77:13:95:40:51:0c:4f:e1:85:15:
75:5d:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:22 2025 by rpki-client