Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: QxDZ46W9J0OQXAamuK/xnTbg98ubR9xter9BU/XkdYA=
Subject key identifier: C4:33:FC:12:39:E9:0B:2A:B6:3B:6D:C8:0A:CF:7A:00:88:DC:1C:93
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 01975C4A732541E22BD44CD43477C30FD073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 00:01:12 +0000
Manifest this update: Wed 11 Jun 2025 00:01:12 +0000
Manifest next update: Thu 12 Jun 2025 00:01:12 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: LAmMWfy3zUJ4HVYwDM5GLB+dGztDTmwZTazCp4w2lXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:73:25:41:e2:2b:d4:4c:d4:34:77:c3:0f:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jun 11 00:01:12 2025 GMT
Not After : Jun 12 00:01:12 2025 GMT
Subject: CN=c433fc1239e90b2ab63b6dc80acf7a0088dc1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:f3:d6:10:72:11:d8:ab:a1:e9:8a:80:11:
a0:49:81:2d:d2:37:35:f9:3c:8e:4f:02:6a:f9:dc:
87:4f:03:86:ab:49:2b:87:36:36:79:23:1d:3b:90:
7e:3a:64:f2:4f:cd:e4:49:12:39:e5:93:07:b5:2b:
bc:c1:33:44:a2:67:79:cd:dd:68:c5:e5:bd:54:86:
7c:9b:2a:6e:8d:2d:72:f7:89:85:e5:35:e1:c1:59:
d2:da:cb:9e:48:fb:53:45:a3:23:00:1b:b3:03:a4:
1f:89:20:1f:ba:1c:18:c8:42:7b:4e:e3:04:85:71:
c0:87:1f:7f:01:12:59:1e:3b:57:76:f1:5e:46:bc:
aa:dd:63:c2:13:5d:d7:fc:d4:9d:14:74:d1:c9:16:
eb:a3:54:8d:61:d3:05:d7:35:b7:1d:13:c8:3d:0a:
f1:d7:1c:eb:f7:f3:47:1b:cb:e8:b9:00:3d:4e:d4:
7d:4a:12:44:c6:85:55:29:6e:ca:16:f6:40:e7:a2:
0d:71:a8:2e:83:ae:26:c1:1b:ca:73:1d:81:93:25:
86:73:08:34:68:de:f1:2d:10:7c:58:f7:d4:c4:81:
21:cb:2a:98:d5:63:e3:db:9a:4f:f3:25:bd:a4:4d:
2e:62:5c:b0:da:7e:05:36:8d:a2:ae:98:b3:e7:44:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:FC:12:39:E9:0B:2A:B6:3B:6D:C8:0A:CF:7A:00:88:DC:1C:93
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:04:94:96:b1:20:2f:31:94:69:0d:e6:77:fd:48:e7:b8:85:
8d:d7:b6:1f:71:82:2a:e4:90:91:dc:58:d7:60:6e:47:7b:72:
10:79:61:d9:c4:d3:cf:f9:b4:ea:78:79:54:b2:bf:70:e4:11:
ab:62:b4:f0:c2:6a:13:58:30:d6:a8:b9:97:19:1f:9e:ad:8a:
55:a6:7b:53:a3:fb:83:78:15:81:d8:b4:a9:01:1a:e5:10:e8:
93:2e:60:ea:6c:7e:02:41:85:7b:08:55:64:b5:76:3b:fe:52:
03:d4:45:95:b5:62:35:f5:7b:bf:06:4d:6f:be:41:e6:13:28:
2d:45:15:08:32:04:cc:08:52:0a:39:5e:70:8e:41:7d:cb:b6:
11:6d:e8:19:cb:3f:e9:40:45:37:98:61:06:a8:2e:06:d9:54:
9a:88:83:1c:64:d3:36:fb:58:9f:b8:7a:01:15:e4:a9:70:bb:
8a:ad:18:0a:11:58:39:b7:9a:01:10:4c:12:2b:38:96:5c:65:
dc:cf:3b:29:b4:47:13:aa:a4:44:3d:1d:80:a1:4d:78:f0:16:
89:a0:86:c0:50:1b:16:57:94:ec:ed:ed:35:26:b7:19:ef:52:
a4:93:ca:54:4f:e0:84:08:6c:7a:07:a0:d7:8c:03:c7:6d:f6:
fc:af:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:53:08 2025 by rpki-client