Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: CMRycK67YXmoSvLqo6iXw+TGqN5WZy4UXwRBKGtEkuY=
Subject key identifier: 36:92:BB:EE:8E:B4:73:E5:C9:F3:37:0C:17:AF:2A:6A:51:C3:E2:E3
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01974A43CD886CDB41DE12CBC2DD14D527A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:46 +0000
Manifest this update: Sat 07 Jun 2025 12:00:46 +0000
Manifest next update: Sun 08 Jun 2025 12:00:46 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: hUbhZy3ioTia9FJfYuy/D5JZEcb/tQbQ8tteQdJ9aic=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:cd:88:6c:db:41:de:12:cb:c2:dd:14:d5:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jun 7 12:00:46 2025 GMT
Not After : Jun 8 12:00:46 2025 GMT
Subject: CN=3692bbee8eb473e5c9f3370c17af2a6a51c3e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:88:25:66:2a:7f:6f:05:ae:87:ed:96:45:
e6:18:32:1c:b0:07:a9:6a:37:f3:75:d6:7b:30:9a:
df:e2:43:02:f2:de:63:c7:b6:07:84:c2:64:d5:31:
3b:31:ec:f0:b4:04:88:3d:c1:b8:67:a6:f9:4c:dd:
ba:10:c3:3d:3d:e3:bc:0c:5a:d8:04:3a:bd:ad:b9:
e1:74:01:28:fb:77:ab:38:65:48:aa:76:71:86:f7:
55:f0:2a:c5:c1:6c:8e:7e:26:9f:c7:90:d4:44:dd:
0d:d4:3e:a6:00:5a:60:ed:ae:af:b3:70:d1:1d:a9:
0d:da:cd:83:8d:f6:38:63:05:4e:30:62:bb:17:c7:
14:90:70:7b:60:ac:a4:7e:3d:a8:54:1c:e2:0f:c0:
a9:3e:39:05:fd:fd:5d:4d:2d:f0:d4:4d:87:9d:9a:
db:a9:b1:da:4b:4c:b1:20:fd:ad:c3:22:8f:48:42:
0c:e9:bd:36:6a:4b:3b:9e:86:24:07:14:4b:f6:89:
b1:0a:37:ee:d4:f5:7c:5f:55:d2:c4:b7:d9:f1:79:
2c:b1:c4:6d:fd:1c:de:48:e5:22:b2:44:01:c8:90:
bb:23:fd:da:02:10:b8:a0:b9:aa:31:67:39:55:a4:
5c:18:4d:a6:da:02:57:ce:2f:1a:65:55:8a:43:b7:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:BB:EE:8E:B4:73:E5:C9:F3:37:0C:17:AF:2A:6A:51:C3:E2:E3
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2f:61:8e:60:4f:fc:80:01:bf:d5:7e:91:1e:fd:c7:21:b0:
16:69:9d:67:fa:d9:5f:b2:0b:fc:de:7c:49:b9:bf:86:53:0f:
a0:be:d9:c3:43:2c:7a:69:13:66:03:35:dd:71:33:62:52:72:
82:62:65:df:87:1f:2c:27:9c:43:c7:18:20:f8:f0:20:d8:ba:
f9:c3:8a:04:3e:dd:55:49:45:e4:61:19:76:dd:61:94:e1:d5:
e0:d9:ec:70:48:cd:5d:4b:24:7d:e7:a8:49:c4:f9:82:90:77:
de:5d:fd:83:8d:7e:6c:a6:46:ae:f2:28:81:e5:48:9a:5f:53:
3c:38:ca:07:07:30:49:3b:71:d5:58:2a:b8:db:2d:4d:44:74:
11:e0:1a:05:1b:80:73:fc:f3:1f:ef:a3:d8:11:3e:48:9a:58:
eb:aa:b6:ca:e5:74:83:2a:4e:a2:00:81:f1:51:49:0c:f6:8e:
e8:9c:0c:30:c9:f5:19:6a:52:cb:92:b0:49:e8:9d:dc:15:24:
23:48:30:a5:db:a6:3b:02:23:bd:ed:9c:f2:58:a2:b7:0b:dc:
b9:6e:09:8b:77:a4:8d:44:83:fa:96:8c:d2:05:74:55:c1:f6:
4e:93:65:dd:d2:a7:bc:c0:c2:28:38:63:0c:af:e5:57:5e:e6:
fc:24:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:55:43 2025 by rpki-client