Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: jC78Zm/fyoNTYRnOy5PDOVxtmq2jjLbQi20LsNI4jsU=
Subject key identifier: 11:51:A9:A6:1B:35:23:67:0D:05:48:DC:7D:E9:AE:EB:41:D2:3A:08
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0197526B77964A6A0EFC0E78433806A60A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 02:01:03 +0000
Manifest this update: Mon 09 Jun 2025 02:01:03 +0000
Manifest next update: Tue 10 Jun 2025 02:01:03 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: FgJvogyobV0TxX8Q9OdNpOZnhLQNIaXTUDabUrKY4dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:77:96:4a:6a:0e:fc:0e:78:43:38:06:a6:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Jun 9 02:01:03 2025 GMT
Not After : Jun 10 02:01:03 2025 GMT
Subject: CN=1151a9a61b3523670d0548dc7de9aeeb41d23a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:2c:e5:5c:20:11:cc:98:5a:ea:b0:16:7b:
e4:e3:74:41:a1:60:e6:13:39:16:db:13:5a:8e:4e:
75:52:7e:2c:10:a8:f7:6e:61:93:3a:6e:ba:98:b0:
10:9d:3e:0d:88:89:a9:ea:95:93:b0:67:67:24:1f:
32:38:b0:e6:20:c6:e5:65:33:7e:ae:b6:72:56:46:
9f:07:13:05:6f:2c:62:bc:f0:8d:c2:17:80:96:02:
24:32:70:fe:4c:1d:a4:a2:88:05:57:8b:46:34:16:
15:17:73:66:b5:3d:c6:11:56:e4:df:78:3f:d4:d3:
db:19:1f:08:22:d7:24:e5:e8:d6:97:0f:38:92:46:
28:d1:9d:ea:09:c0:bb:9d:23:e5:7e:56:7b:1f:34:
45:7b:bd:65:0e:84:c6:86:cc:f0:8c:59:ea:b5:0e:
20:64:b0:2a:25:9b:aa:71:52:45:70:a1:9a:c8:c2:
2c:c8:89:e9:94:b6:8c:cd:8a:a9:45:4c:fd:34:f1:
15:ff:36:2e:92:02:27:65:00:5d:26:7b:6b:69:80:
91:40:c3:6e:2f:d1:71:df:75:46:db:f6:d5:5c:31:
1a:c7:a4:ca:56:60:b4:8b:4c:ce:f8:38:7b:a4:b8:
a9:52:ba:3d:ac:f1:27:53:b1:b4:78:a7:6d:37:0f:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:A9:A6:1B:35:23:67:0D:05:48:DC:7D:E9:AE:EB:41:D2:3A:08
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:30:7e:90:c1:4e:a7:e8:f5:fb:7c:63:7d:42:ba:25:50:e5:
5c:bd:33:cb:dd:fc:a3:74:01:b2:b8:16:79:0e:f2:c7:74:33:
88:71:e0:05:a9:5e:cd:bc:03:45:e7:29:2e:6a:b4:1f:78:99:
00:f2:86:94:65:fd:b8:c0:df:c8:e8:08:4c:9c:a5:da:36:88:
ba:ec:07:12:21:0a:ee:ee:ea:f0:ab:f1:ee:49:e0:b1:45:cb:
72:1b:f7:cf:02:7e:fa:17:92:ae:9d:cf:9a:92:07:5d:c7:5b:
70:c8:bb:22:cf:07:ca:81:27:51:74:15:f8:44:5d:dc:fd:4c:
4b:19:f7:16:e1:fb:98:c9:3d:b0:6c:b3:22:e5:4f:78:cc:cb:
40:6a:c1:b2:67:a7:22:68:35:5b:80:3e:f9:87:af:b1:0d:b2:
9a:43:84:a5:7a:48:90:fd:5a:a3:5d:98:e7:c0:9d:3f:76:74:
50:78:82:2b:5a:4f:5b:03:ff:9d:3d:c4:38:15:64:14:c2:32:
bc:4f:cc:23:76:01:c0:a4:5c:f0:50:cb:e7:b1:2b:c8:2b:8b:
fc:f9:01:20:6c:b6:34:5b:54:72:1e:0b:43:1e:5a:1b:42:e1:
97:2d:94:c3:5b:3f:45:a9:21:35:7e:53:c7:83:80:6a:da:e2:
75:9f:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:31:12 2025 by rpki-client