Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: yKnpSuM/4KVyMooeKxhJ7K07H/HfXSOute2USXNsB/8=
Subject key identifier: 45:28:78:83:35:85:2E:3D:7A:45:B9:16:BB:44:C6:31:F2:AE:59:81
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 01975E38B9DF36D4D1B4392110957641A9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 09:01:05 +0000
Manifest this update: Wed 11 Jun 2025 09:01:05 +0000
Manifest next update: Thu 12 Jun 2025 09:01:05 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: 8EXEcvcobm098A39P1/9dNfuaiBu1NYaKPnBTR9s+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:b9:df:36:d4:d1:b4:39:21:10:95:76:41:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jun 11 09:01:05 2025 GMT
Not After : Jun 12 09:01:05 2025 GMT
Subject: CN=4528788335852e3d7a45b916bb44c631f2ae5981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:16:61:1b:3b:2f:36:d2:d0:90:d7:8b:15:
86:e4:a9:2a:b4:89:e0:2d:17:4f:d3:1f:2b:3f:f2:
9f:e1:bb:80:e8:b5:92:37:87:4a:87:f8:4e:94:d9:
3b:3d:39:9c:e5:45:68:84:8e:a4:24:6f:96:22:15:
97:30:ab:05:ff:83:02:5d:06:09:3e:a9:fb:5e:c7:
68:30:5a:87:0e:2f:a1:02:fe:39:b8:2f:f7:03:af:
16:62:c9:ad:8d:d4:e3:43:39:37:27:3d:78:f9:b5:
6f:36:17:20:e6:2d:6c:22:d1:c5:48:ba:a8:c8:41:
a5:46:3d:98:fb:19:18:d4:1c:a9:0a:9f:3c:75:e5:
cc:51:6b:94:f5:d4:7f:68:42:c9:88:7c:60:f6:cb:
d0:ca:6c:58:49:49:c7:8a:3c:8f:ab:2f:a8:46:1a:
82:a5:22:e4:93:2e:17:f4:b9:2e:67:b4:39:63:1a:
d0:c4:e7:a5:7a:8e:d5:55:d2:1b:f8:13:b5:83:8a:
86:18:5f:db:05:65:fb:1e:7f:cf:c1:e4:79:c7:21:
dc:ef:72:a5:64:af:68:70:88:dd:dc:6f:6d:f9:89:
16:ec:b2:85:56:4a:f6:71:a3:e4:40:9b:1b:aa:b2:
e2:a0:d9:f2:9f:67:aa:d3:ac:3d:f6:62:ef:1e:96:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:78:83:35:85:2E:3D:7A:45:B9:16:BB:44:C6:31:F2:AE:59:81
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:29:c5:d3:c0:d5:57:08:29:02:6e:52:e8:18:1c:b1:5c:
38:da:0c:9f:a2:3a:64:eb:3b:7f:d1:e6:0b:bb:0e:95:86:3a:
e6:14:48:02:f5:e2:74:32:40:a5:8d:92:f5:6a:f9:80:77:c3:
23:04:8a:bb:5c:93:93:b0:fd:39:51:35:c4:9d:a3:3c:b6:36:
f2:1c:8b:f8:98:49:2c:53:55:e5:62:6f:bc:22:0f:d5:b7:7c:
e4:71:fa:66:35:53:b5:8b:2d:ed:5e:a0:1e:79:c3:62:6d:e2:
29:7c:3d:68:c7:9e:af:96:69:99:0a:9e:1a:72:ad:b5:c6:f3:
9f:ba:24:61:cc:3c:17:22:ea:35:48:a7:45:75:4d:2a:bb:7c:
ec:a1:f3:74:e3:8d:90:9d:e3:0a:96:0e:73:e0:87:a2:32:80:
c3:ba:6b:61:f3:95:52:1c:aa:75:57:96:2f:78:6c:8a:98:5c:
3a:f5:62:0a:f4:f4:49:10:f6:28:b1:b1:d3:e2:1b:22:6e:7a:
07:1a:9d:4d:06:c1:7c:6f:60:27:ae:aa:32:5c:14:46:92:85:
04:2b:5d:dd:fc:ee:9a:be:b3:30:bd:fa:b0:75:62:71:d8:41:
a8:cb:24:03:e0:ff:bb:01:25:7d:c9:4d:e0:9d:2b:23:ba:85:
77:97:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:02:57 2025 by rpki-client