Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: kmE3VAphguDE5tW6+SQV1m3Es8Nsm+6pUHjlVUi98ts=
Subject key identifier: 97:45:13:E1:AC:34:24:32:5B:11:34:34:94:80:96:EF:7C:C8:AB:F6
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 01974DB288F3CE5DB6C8DB5C74A51E9532E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0D64
Signing time: Sun 08 Jun 2025 04:00:35 +0000
Manifest this update: Sun 08 Jun 2025 04:00:35 +0000
Manifest next update: Mon 09 Jun 2025 04:00:35 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: OGXq9+7Va7Pdufb9MNS7Y94z5J29p9gwF1PQxCxs1mA=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:88:f3:ce:5d:b6:c8:db:5c:74:a5:1e:95:32:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jun 8 04:00:35 2025 GMT
Not After : Jun 9 04:00:35 2025 GMT
Subject: CN=974513e1ac3424325b113434948096ef7cc8abf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:92:c3:a2:1c:1b:56:50:11:3c:cb:ff:6a:
95:9e:11:ce:d7:9e:43:4a:94:f8:cf:5f:60:d0:42:
b8:14:29:8f:b2:96:8f:e6:a3:fb:0a:08:e1:cf:4c:
66:70:df:68:e2:53:c9:1e:af:03:bf:2f:6c:5d:c2:
84:12:7a:aa:a7:76:b4:e7:be:dd:fc:9b:50:29:b7:
cb:c6:0f:7f:70:d6:a7:77:85:b2:e7:ac:e1:9d:0c:
6a:a3:25:c3:5a:0e:83:40:d7:f8:29:55:48:1f:26:
ee:90:b7:66:42:df:ca:9b:a5:a5:7b:9e:1e:43:78:
e0:07:61:81:fc:8f:18:aa:2b:fa:40:d3:29:07:21:
84:b9:e8:e9:33:e6:33:d3:55:cb:06:ae:c8:bf:5d:
5b:40:7e:6c:46:22:be:46:a2:15:75:ac:1f:d3:83:
77:6b:e5:11:7e:af:6d:b8:23:14:5d:13:6d:0f:b3:
c2:06:8b:91:5c:88:41:fd:2e:0b:c6:75:5d:ad:2e:
1c:42:23:3c:78:30:94:70:50:27:00:4a:ee:f0:72:
1a:6b:df:75:56:4c:37:96:3f:8c:0a:57:a6:59:61:
9c:6c:f2:a7:0e:05:26:9e:d8:81:8d:33:af:8d:6f:
d8:a7:86:db:99:f8:6d:20:d0:85:6d:67:39:1d:da:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:45:13:E1:AC:34:24:32:5B:11:34:34:94:80:96:EF:7C:C8:AB:F6
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:a0:9b:93:f4:92:c0:4d:be:73:91:47:47:04:05:85:3e:
b9:61:72:c9:4c:17:08:0f:69:3f:51:2a:11:ed:0e:08:63:4c:
de:92:e4:3a:45:25:89:ae:29:dd:89:93:da:10:29:8d:b9:7b:
10:dc:c0:8c:a4:92:bd:0a:ae:f2:9b:af:e4:78:a3:2a:27:e9:
b0:ae:70:51:f8:71:d6:a3:91:46:83:dc:d5:a9:13:71:57:4d:
ac:c6:9d:df:43:b9:77:5a:ca:ff:f0:00:4c:62:ab:89:a6:58:
e2:2c:07:22:3a:43:eb:95:54:be:c4:75:62:60:f7:2e:61:80:
21:1d:36:3a:f2:e8:40:53:bc:8b:9f:22:16:37:3e:c5:4a:19:
f8:c0:3d:62:ba:70:92:ac:2e:01:36:82:54:3c:e0:98:79:44:
40:46:a2:1e:f0:87:f0:e4:16:06:0f:0c:0d:43:e1:c9:0d:8f:
c5:e2:0e:2f:51:05:d7:ea:1a:54:7b:43:c9:2a:12:f0:0f:43:
c6:1e:80:50:5e:b6:19:38:f8:41:ba:62:65:63:fd:40:ef:44:
fe:d0:7c:29:3a:c9:a1:1c:3c:18:3a:d9:20:25:19:82:99:97:
8e:64:9e:ab:43:5a:54:d6:45:5c:ab:6c:a3:be:8e:62:a6:a1:
b6:df:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:44 2025 by rpki-client