Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: /mGM2NcwfLkskkHFppt0dfBO5BvHTiNzQt5bgbbAfKM=
Subject key identifier: E7:EE:81:15:36:C6:1E:9E:0B:A9:32:6D:95:92:5F:26:1F:C5:A8:C7
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019752A267E6799A52B0BA51A8B2F5EFE1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 03:01:04 +0000
Manifest this update: Mon 09 Jun 2025 03:01:04 +0000
Manifest next update: Tue 10 Jun 2025 03:01:04 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: Mr5752NJc7LixOAFRJI81CZMc9H0SdgwlRNPMe7QXGI=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:67:e6:79:9a:52:b0:ba:51:a8:b2:f5:ef:e1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Jun 9 03:01:04 2025 GMT
Not After : Jun 10 03:01:04 2025 GMT
Subject: CN=e7ee811536c61e9e0ba9326d95925f261fc5a8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:cf:67:a6:22:54:60:05:4e:75:04:2c:78:
12:a8:27:6b:2e:eb:90:2f:c2:81:cb:95:6b:d8:8e:
bd:1c:21:6f:ff:36:8f:ba:23:38:52:69:d6:6a:5c:
a2:1b:92:5c:d1:86:db:2a:3a:e3:a3:97:97:3d:ed:
1a:34:46:33:e6:78:0b:05:55:a6:e7:60:45:c0:de:
3e:50:a5:e0:29:7c:5f:fb:c9:eb:ff:da:45:16:99:
e4:af:5e:5b:f4:12:9c:11:50:b3:fa:43:6e:bb:70:
88:1c:90:3e:c7:c0:1e:1a:a1:22:14:4c:37:1e:e8:
4e:9a:4c:7a:24:8c:b6:63:e9:05:f2:57:56:53:cb:
0c:40:51:9e:19:13:c7:93:3f:10:d2:06:54:2b:39:
ed:f2:04:51:a3:fc:9c:3c:eb:84:70:85:0f:a6:71:
0b:2b:bc:5a:4b:fb:c6:68:39:26:80:58:92:0b:27:
9b:ab:f1:b2:cd:f6:19:a9:7a:96:d7:bf:ca:d5:d2:
96:3a:36:a7:62:c6:29:9b:b5:88:3c:c6:85:0f:a1:
57:1b:cd:06:c4:ee:be:72:12:b9:92:33:63:f5:45:
dd:fc:06:36:35:79:32:57:e5:4f:66:79:4a:4f:1f:
c2:9a:a6:bf:53:b5:db:d7:8c:ef:19:44:83:bb:dd:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EE:81:15:36:C6:1E:9E:0B:A9:32:6D:95:92:5F:26:1F:C5:A8:C7
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:76:79:bd:82:48:ce:81:e6:3f:2a:32:8b:cb:65:4e:c0:8d:
a3:44:d7:83:d3:03:cc:49:01:0f:9d:3d:b8:08:0d:ae:ad:2e:
aa:81:c5:05:4c:d3:00:44:9c:96:81:04:7d:eb:dd:7b:c1:79:
17:49:0c:9e:dc:cd:15:96:17:02:77:ac:d0:c4:1e:e3:cc:af:
10:62:c0:b6:4d:70:2b:86:1b:03:13:da:45:64:14:65:40:17:
c4:de:18:6e:bf:36:e6:75:ec:e2:66:74:0f:e3:67:5b:3f:93:
f9:af:27:d4:6f:d1:d5:08:96:a0:11:03:aa:36:3c:fa:ed:55:
97:84:6a:9d:48:00:77:d0:f4:8b:ec:db:c4:a8:ed:d5:ea:e9:
a0:4d:25:cf:fa:e5:a9:2c:8d:ed:80:81:5f:64:0e:35:4c:54:
b3:8c:da:b4:dc:62:68:b5:6a:bd:4b:8a:b4:e9:dd:59:44:3f:
76:e5:08:1b:b4:95:eb:c6:61:77:6b:36:c3:b0:5b:f9:c9:68:
35:d5:b9:37:45:1b:06:d7:4e:60:42:8d:08:ac:9c:32:27:01:
5e:16:94:01:27:5b:56:f0:36:d6:07:7b:59:ee:79:18:11:60:
a9:4c:c2:1e:b7:31:ff:9a:a9:dc:a5:8f:d9:f8:99:36:2d:cf:
3d:ee:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:35:34 2025 by rpki-client