Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: 1E+Kyc5l36kUv4wkMc1oPQxw/sc6TjdIw4e5yvxm1I8=
Subject key identifier: 0A:09:76:04:B5:2A:77:D9:EB:B9:62:77:74:7D:DB:31:48:02:59:FE
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0197586D7E318CA7FAA1D498A976D9DDD320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 06:00:59 +0000
Manifest this update: Tue 10 Jun 2025 06:00:59 +0000
Manifest next update: Wed 11 Jun 2025 06:00:59 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: nw/ZwrLqckZDJ7g/R06DTXjvCI42CIxHHnga/09imco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:7e:31:8c:a7:fa:a1:d4:98:a9:76:d9:dd:d3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jun 10 06:00:59 2025 GMT
Not After : Jun 11 06:00:59 2025 GMT
Subject: CN=0a097604b52a77d9ebb96277747ddb31480259fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:2c:f8:e7:70:20:b1:27:ec:a3:e7:44:6c:
18:be:6e:8d:e4:74:dd:3c:69:a6:51:cd:b5:75:65:
31:df:a6:db:7a:20:31:41:b2:0e:e7:c6:df:4f:57:
2e:11:ef:e7:07:15:03:4b:5e:37:6a:51:3c:30:54:
94:79:85:fd:0c:9e:ed:ef:4b:bd:a3:2b:42:44:27:
27:60:98:5a:e0:e9:75:d0:a2:74:4e:aa:79:ae:0e:
e8:86:ea:bc:34:b3:20:ad:cf:a8:61:71:49:a5:1a:
da:fc:77:5d:f4:d0:df:52:23:8e:5c:90:8b:97:27:
d2:b0:df:b9:1b:fd:2b:b1:cf:f5:e1:76:95:80:7f:
b1:21:75:1c:ab:4f:97:c5:d0:2a:86:01:71:04:88:
fa:be:6a:b7:95:27:30:8d:93:f6:13:32:98:a1:cc:
d2:41:b6:60:72:3e:ef:22:cf:7c:51:ba:95:07:83:
7d:67:5e:77:a7:e8:50:ab:5e:43:55:05:48:fb:42:
54:f7:d7:df:c0:f4:22:17:f1:2b:23:b6:7d:2e:6e:
ad:d4:8d:71:32:ce:a2:44:7f:c7:20:de:79:2f:e7:
2b:40:97:05:ba:63:4c:54:5b:55:eb:69:2f:c5:8e:
f0:c1:f2:cb:84:c0:3e:e8:14:3c:d4:3f:26:52:b3:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:76:04:B5:2A:77:D9:EB:B9:62:77:74:7D:DB:31:48:02:59:FE
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:84:5a:db:71:b1:e1:c4:05:ca:d8:1c:46:36:46:92:85:
46:a7:da:04:89:59:17:c5:2d:34:19:b1:aa:87:69:0a:87:94:
fb:bf:a5:30:01:29:fe:a2:61:e4:33:e6:6f:a4:ca:9a:c0:e7:
20:55:e7:4d:b9:8f:45:31:74:fb:6d:1c:12:93:ee:c2:e6:1d:
b3:5c:67:53:38:3e:1f:37:ec:98:a5:6f:8f:42:ed:15:fd:e8:
8f:26:de:84:ee:7e:c3:c6:4c:7b:2f:d1:c2:6e:c6:1e:1b:25:
ce:63:aa:82:6d:43:79:f1:8d:e3:5c:8a:7e:88:2d:34:cf:71:
b9:c2:bf:af:5a:aa:6a:4e:5f:38:87:b4:a5:f5:9c:d9:6e:a2:
68:2c:2c:29:32:d4:15:71:d5:8e:65:c5:84:5f:d5:c9:f3:c8:
55:a7:4f:e5:9c:de:77:cd:1f:80:e4:f7:4c:8d:8c:80:4f:94:
83:bf:3d:30:6c:58:46:64:44:4f:33:f4:45:83:4b:41:b4:7b:
65:00:c6:0d:83:aa:59:3a:ca:19:2e:7b:ce:39:8b:bd:c9:cb:
da:85:ba:6c:49:d1:80:4c:a5:69:ee:47:71:f6:79:f9:56:8f:
88:b4:92:04:0c:49:2e:14:b3:10:b4:79:2b:83:b9:51:71:96:
49:50:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:41:29 2025 by rpki-client