Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: +GnW7DnVUb5DWRnvz+zhVcFtNqynE/5sPFSCW5slzJE=
Subject key identifier: F7:96:9A:09:D6:2A:2F:33:1B:00:22:4B:F3:2D:43:CE:AF:98:DC:78
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019751216542680B5277B87A13EE74F7AAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 113B
Signing time: Sun 08 Jun 2025 20:00:32 +0000
Manifest this update: Sun 08 Jun 2025 20:00:32 +0000
Manifest next update: Mon 09 Jun 2025 20:00:32 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: vrrYSA8OXXXT5KZ2riSbyXcSKCD1CY0/c92mOTP2X7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:65:42:68:0b:52:77:b8:7a:13:ee:74:f7:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Jun 8 20:00:32 2025 GMT
Not After : Jun 9 20:00:32 2025 GMT
Subject: CN=f7969a09d62a2f331b00224bf32d43ceaf98dc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:39:1d:f1:3f:e2:b0:70:d4:5d:6d:68:f6:
6a:1f:cd:56:6f:5e:68:3b:5d:d5:c8:95:e9:07:d5:
56:a7:b0:3d:86:ca:b9:02:d2:37:7b:cb:e6:8d:35:
a0:81:a5:f8:9b:a7:d4:c2:c4:d3:83:39:99:9c:78:
7e:82:0c:5c:09:f1:2b:95:3b:23:a5:21:98:bc:50:
62:6d:08:70:7b:2c:e5:5c:2d:d8:4d:ef:a0:c5:b3:
91:a0:1b:cf:bb:87:0f:44:49:65:70:0d:44:f0:92:
fe:af:fe:9e:9c:be:c4:d9:d0:e2:ed:7f:9b:96:43:
80:8c:d0:eb:b9:5a:8f:ab:a5:ba:f3:33:73:46:92:
c2:f4:f6:5c:68:bd:fd:10:2e:80:ca:fc:4b:2a:bb:
ed:9a:29:d3:f7:39:a9:1a:1f:73:5e:5f:6a:95:70:
56:4f:e5:85:5d:67:e6:89:75:80:c7:ce:8a:f4:b6:
2b:21:95:ae:03:14:a5:54:a8:d0:99:f8:dc:cc:41:
40:b2:55:95:d9:86:c4:e4:73:b2:49:0a:00:99:eb:
6c:8f:dc:70:ea:9d:34:ce:1a:60:f3:85:0a:51:52:
db:c4:7a:0d:3f:76:5b:94:c6:42:2c:00:cf:15:8c:
14:0a:c0:86:e0:85:ea:fe:9c:6e:95:cd:2f:9d:1b:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:9A:09:D6:2A:2F:33:1B:00:22:4B:F3:2D:43:CE:AF:98:DC:78
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:82:c3:19:a7:ee:f9:1f:e1:0f:1c:89:ef:88:2c:80:31:83:
27:5a:4a:c8:65:66:39:cb:e3:a9:c2:29:c0:cb:ad:60:4f:d1:
ee:22:dc:19:09:dc:fc:66:05:16:c5:c8:d7:9c:06:34:23:00:
af:3a:e1:88:55:ce:21:ff:a1:e0:74:b8:a4:a7:88:e8:e0:24:
3e:13:91:51:68:f4:33:d4:47:16:66:7f:f5:2b:07:45:3f:b6:
88:40:0f:4a:89:0e:c6:05:94:8b:70:6f:7c:ac:dc:72:9e:4f:
74:78:4d:9f:fa:11:49:32:f8:b2:ae:a9:3c:66:93:cc:bf:75:
69:c6:4f:5d:8a:5c:a7:41:0e:8d:a8:a3:66:16:3b:45:bd:61:
64:80:44:01:e8:a1:58:14:bf:fd:f2:2f:a1:63:6c:46:f2:b0:
2e:6e:a8:d8:da:4e:85:52:5f:94:2c:af:43:9d:90:67:85:da:
f9:df:d6:b6:bc:32:1d:64:fd:d8:6d:b9:1c:af:f0:b4:57:ac:
fa:c6:fa:e6:00:c5:00:32:1f:e4:c0:5c:7f:e6:dd:1f:e3:a0:
1b:bb:02:53:42:6a:6f:d3:ca:0b:9f:7d:f4:3b:da:8b:2a:35:
e3:10:21:b9:a3:96:05:b2:6d:e7:b6:a2:13:37:7e:ef:fe:c8:
2c:37:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:14:23 2025 by rpki-client