Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: ayWfvrx9Je0L+97OCjpJYeROW1oHWmITQtgxQaeq18Q=
Subject key identifier: 6B:C5:39:87:E4:9C:E4:C7:05:62:35:3B:2B:C7:BE:50:20:1A:A2:B8
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 01974BFB9494B8D4E3D3998CFAC2741EA51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 12AF
Signing time: Sat 07 Jun 2025 20:01:08 +0000
Manifest this update: Sat 07 Jun 2025 20:01:08 +0000
Manifest next update: Sun 08 Jun 2025 20:01:08 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: Cs3dvgK2MQ8q+Re4/8cyzxBnHMq/jKIwPJUU2/pTQYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:94:94:b8:d4:e3:d3:99:8c:fa:c2:74:1e:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Jun 7 20:01:08 2025 GMT
Not After : Jun 8 20:01:08 2025 GMT
Subject: CN=6bc53987e49ce4c70562353b2bc7be50201aa2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:37:b3:6a:b5:ae:53:8a:b9:42:2c:7e:3c:
10:8f:ad:e2:34:b6:8a:46:db:18:ac:cc:d0:77:8c:
63:6b:ad:82:f7:72:33:13:99:40:aa:83:73:99:2c:
4c:96:df:2a:79:65:9e:03:50:c0:6c:0e:22:d3:ae:
71:c8:a4:8c:93:2b:44:29:3c:84:cc:5c:10:5c:05:
d9:ec:72:39:18:f2:ef:50:d9:ff:a6:f8:c9:e5:09:
a5:1b:f3:cf:4d:60:70:11:f3:b3:7b:4d:ca:a5:49:
7c:22:8e:aa:a4:b1:90:20:c5:4e:c8:86:27:8a:87:
ae:4c:75:d1:58:c8:ba:e2:d5:90:b6:2c:2e:d5:84:
f8:52:05:35:6d:1d:bf:fb:fa:1e:a0:3d:4c:0a:4d:
5e:c5:c4:86:69:4f:d3:94:cd:0e:01:1b:c9:8c:8e:
92:76:41:1a:5d:1b:2e:df:5f:17:40:0b:7e:13:df:
6e:d7:38:b5:c3:6e:4b:8e:6f:37:f7:c6:d7:95:39:
89:1f:b2:08:1d:da:2c:ba:c8:e3:e3:1e:4e:d9:9b:
1e:23:0c:ed:57:6c:90:11:b5:1b:7c:a7:ab:bd:ff:
2d:1f:0f:21:b5:ee:d3:d9:35:c6:55:fe:f8:c6:21:
90:39:c6:35:cc:f9:72:b5:79:91:92:1a:b2:11:b5:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C5:39:87:E4:9C:E4:C7:05:62:35:3B:2B:C7:BE:50:20:1A:A2:B8
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:a9:86:ae:d2:17:7c:74:cb:eb:ca:a6:c9:a9:e3:0e:50:
98:c9:84:b6:09:83:2a:86:11:50:d8:b3:28:1a:e4:af:09:ec:
b6:77:c1:3f:06:91:da:20:2c:85:70:aa:2f:ed:f2:e0:6f:d2:
ad:30:bc:f4:1c:5a:37:25:43:2e:ce:56:44:a3:f5:75:30:15:
9b:48:0c:53:f6:eb:18:6e:90:cc:e5:31:45:4c:79:47:ee:80:
9d:a9:d6:f4:36:f5:9b:ce:3e:86:3b:17:8c:45:c1:26:31:ee:
aa:98:48:2f:4b:9b:b7:9f:f1:6e:b6:12:5b:9e:12:30:80:1a:
cc:7f:64:78:c1:e1:61:e5:7f:31:8a:66:c3:81:9f:18:30:47:
c1:47:7e:11:c3:47:b4:d0:f2:91:35:4c:a8:d4:db:c0:bc:4f:
bb:9d:b0:1c:a1:df:a8:5a:ac:ae:3e:3b:aa:1d:63:e7:06:39:
c1:a0:97:4b:bc:2f:7d:2f:f1:6a:e3:b8:3b:fb:57:38:e3:c0:
5e:ee:62:71:51:5f:fb:81:3d:19:e0:15:09:72:6d:1f:da:7a:
cd:ba:75:b5:6b:86:56:10:6a:74:3e:f9:0f:27:c8:9d:11:74:
ab:22:15:80:9e:19:a8:65:56:77:c4:f0:de:dd:95:7d:34:df:
80:d0:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:14 2025 by rpki-client