Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: 8sD2y+Y54qFD6cYBvptW3iKeF7Vbfife/AKtZffDkZs=
Subject key identifier: A9:5C:DA:83:B9:64:17:19:71:88:83:BF:5A:30:0E:29:2A:9A:85:21
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 0197662945CB4B09B0616E1E21B70B0982FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 22:01:10 +0000
Manifest this update: Thu 12 Jun 2025 22:01:10 +0000
Manifest next update: Fri 13 Jun 2025 22:01:10 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: chZGEeqthCgRewANQij1IA0BIpcHzRRH83GYFu6DYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:45:cb:4b:09:b0:61:6e:1e:21:b7:0b:09:82:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Jun 12 22:01:10 2025 GMT
Not After : Jun 13 22:01:10 2025 GMT
Subject: CN=a95cda83b9641719718883bf5a300e292a9a8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:23:91:22:e6:32:c8:a2:0e:db:8c:57:ee:
af:86:5b:db:d2:87:0d:b4:13:9c:cb:bf:95:66:63:
90:9e:5e:51:3b:26:ca:bf:d1:e8:41:b8:3d:5b:5f:
9a:9f:59:90:4f:6c:b7:70:bc:aa:b9:0c:ef:75:46:
18:63:ea:f4:49:22:0b:ac:70:44:53:91:2f:8e:2d:
9f:3f:e8:3d:4a:8d:94:8e:49:23:08:68:6d:62:74:
65:e1:0b:cd:f3:2a:27:5f:c4:dd:0b:5e:87:07:a7:
e9:8a:fb:3a:ee:46:2c:c7:1b:87:88:41:85:a8:40:
85:d6:b2:83:cc:72:73:7b:0a:70:77:9e:36:cf:ba:
f5:5a:76:70:e4:c7:b8:aa:85:ec:99:7e:5d:40:01:
f0:6a:a7:58:67:fd:71:e6:a3:e4:2f:54:55:d3:e9:
38:50:33:05:67:1c:82:f9:86:d6:fd:59:63:fc:80:
63:c9:f0:1b:35:53:4c:d5:bd:77:e3:0e:db:4a:63:
a5:a0:fc:2b:3f:51:ae:8b:2c:4d:97:c6:6d:61:f5:
76:91:1c:e0:a4:0f:9f:f9:85:ea:4b:66:de:bd:f7:
be:99:dc:ea:52:f8:45:47:18:24:43:39:4f:bb:46:
53:77:61:de:d5:cc:f9:98:fa:66:b0:fb:29:e3:40:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5C:DA:83:B9:64:17:19:71:88:83:BF:5A:30:0E:29:2A:9A:85:21
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:44:2a:41:27:ac:27:5a:34:c0:4c:77:4e:d9:16:71:64:
35:bd:1a:71:c9:15:3c:30:4e:05:4a:19:87:aa:58:d2:e0:a1:
31:43:72:12:b1:1d:0a:b7:8c:85:e4:2a:f4:9b:a5:78:2c:75:
2a:e6:e5:28:a8:31:08:ff:5b:46:c5:c7:89:87:cd:1a:20:27:
17:56:c0:42:8c:67:76:62:91:0c:c2:1c:66:d0:db:7a:7b:67:
e9:d2:40:2e:1a:f6:5a:7b:39:21:8a:64:8b:b1:79:ba:e0:e8:
82:84:7c:4a:a9:dc:e7:91:1e:8a:4b:a3:75:4a:ab:a1:d3:25:
dd:1f:85:da:e2:86:65:48:74:7d:52:9f:2b:c5:1f:3c:57:39:
4c:0f:cd:49:89:28:c2:7e:1c:e7:a4:cb:7d:fc:ac:09:90:1d:
41:04:39:1f:ed:a3:aa:db:63:33:bb:55:80:a5:d0:a5:74:65:
8a:53:bb:66:39:c0:58:0d:87:b7:44:47:17:a2:86:99:53:c8:
3b:1f:b7:05:09:0f:77:b7:5f:56:a8:27:ac:f6:8a:ec:e7:99:
1a:fc:87:a5:4f:18:a0:14:74:db:ed:7c:d3:ba:2d:59:88:bb:
b4:bb:07:d8:f2:df:5f:dd:3e:d3:14:a8:39:89:c1:2d:48:21:
ec:34:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:36:47 2025 by rpki-client