Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: TDxEJEtvFajmCV/Q7itcmV1zJE2OzoqqsSLvgSgy+Hw=
Subject key identifier: EE:32:64:6E:7D:BD:D5:78:CF:B6:F1:3D:BA:4B:9A:32:B2:8C:0E:A6
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 019754901A08CD8BE6C97FC78B76087ACA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 12:00:19 +0000
Manifest this update: Mon 09 Jun 2025 12:00:19 +0000
Manifest next update: Tue 10 Jun 2025 12:00:19 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: +5gTu6tI3v2pfCNY79SiTG3FmoZu8Sb9kd0CmWK6mlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:1a:08:cd:8b:e6:c9:7f:c7:8b:76:08:7a:ca:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Jun 9 12:00:19 2025 GMT
Not After : Jun 10 12:00:19 2025 GMT
Subject: CN=ee32646e7dbdd578cfb6f13dba4b9a32b28c0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:40:fa:4c:b7:6f:d8:22:31:c0:20:a7:cb:
e0:ab:8d:67:01:28:ff:53:13:86:4e:d3:b8:7d:3e:
47:bf:00:0a:45:c9:28:8c:20:b1:3c:e7:f8:83:f6:
ff:06:aa:32:e7:2d:7a:80:87:41:8b:48:e3:86:32:
b6:ff:8a:48:a6:da:85:4a:7a:ab:30:3f:37:49:44:
af:4b:0d:e2:60:c5:f7:15:fd:8f:b1:c9:d8:0e:4c:
9b:61:0c:c5:6b:97:4a:f7:67:ee:b4:13:5a:cc:98:
d7:a0:09:6a:24:f8:a0:55:f3:9f:09:d6:85:15:e4:
6f:37:5e:43:66:aa:88:c4:c8:ac:44:77:ac:e6:8b:
b2:20:36:2a:e4:a1:cd:32:0d:40:e5:73:da:a4:a6:
23:fc:ba:48:a0:3d:ba:e4:b7:69:8a:f8:6f:cd:3e:
be:47:8e:99:25:e8:db:b8:69:0a:98:51:6b:07:ee:
2d:38:cf:64:b3:c3:70:87:a4:22:47:9c:6f:a9:3a:
7d:8f:42:e9:26:ba:6d:dc:87:b2:2c:71:48:f2:43:
00:9d:1c:2f:f0:9a:1e:fe:c4:4d:5a:c9:b4:56:a8:
84:ee:c1:64:67:47:15:70:6d:84:64:f7:b7:a9:f6:
67:b9:3c:65:b8:ce:be:a9:29:00:be:8b:67:ff:d9:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:64:6E:7D:BD:D5:78:CF:B6:F1:3D:BA:4B:9A:32:B2:8C:0E:A6
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:ef:2e:e3:f9:12:cc:9f:7d:8a:22:5d:0f:8c:da:9e:0f:
e9:a6:78:05:f6:50:c5:a8:7b:e8:7e:ce:42:25:9b:75:15:55:
d4:08:62:73:9f:63:f8:67:2a:4a:42:4f:5b:be:fb:52:ef:b0:
75:32:e9:60:97:27:48:77:fa:4d:34:04:5d:6c:b9:e5:fb:4d:
43:e8:3b:53:62:5f:f8:d9:ab:d6:1c:78:fc:e8:0f:46:74:07:
08:90:6b:37:fd:89:57:9c:a7:f9:0b:f0:10:56:92:dd:ea:dd:
30:86:c3:5a:b5:30:fd:fc:a3:13:cc:66:02:0e:74:d0:a6:e0:
08:6c:5e:b2:0a:95:3c:7d:e2:af:48:6b:0f:95:86:f1:22:11:
9c:ea:5f:dc:41:4b:55:d1:47:e4:18:a1:3c:d4:ff:be:46:f9:
ee:48:25:f0:3b:62:97:99:c3:e0:d5:0a:d5:49:40:97:70:c6:
ca:08:35:b1:f4:34:79:a3:ef:09:e2:2c:27:a9:c7:34:b0:3e:
b0:ab:0c:a0:14:01:c7:85:50:48:65:23:1a:fb:12:99:a8:a7:
f0:ba:6e:b3:30:a8:48:b8:53:65:ba:de:85:2c:c2:1d:c7:ec:
2d:15:81:8d:03:9b:17:b8:1f:88:a2:6b:8f:1c:62:81:a2:d9:
3c:0f:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:41:14 2025 by rpki-client