Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: UXkmwyzAocrGgWnsW/nUZbSu/SdQPrAtg2dcD8Opxqg=
Subject key identifier: BB:23:6D:46:AA:21:FD:1C:A2:29:14:B4:B6:FC:73:F2:35:40:8C:5F
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019758DAB6D61E95B575201EE7150321D8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0BBD
Signing time: Tue 10 Jun 2025 08:00:17 +0000
Manifest this update: Tue 10 Jun 2025 08:00:17 +0000
Manifest next update: Wed 11 Jun 2025 08:00:17 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: bYugnr3M3dREGl5gRVYwGfZH2b/VtvIuYWo7/Raoavc=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:b6:d6:1e:95:b5:75:20:1e:e7:15:03:21:d8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jun 10 08:00:17 2025 GMT
Not After : Jun 11 08:00:17 2025 GMT
Subject: CN=bb236d46aa21fd1ca22914b4b6fc73f235408c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:7b:a4:1e:e5:18:f8:fa:11:0a:de:a9:38:
a4:7b:bb:66:99:60:8f:47:81:3e:2c:db:51:a1:15:
97:1f:79:8f:bd:09:63:bc:2c:68:b0:2e:0b:16:9b:
13:3a:d9:a2:ba:f6:1c:8c:b6:77:49:8a:97:43:87:
c1:a2:80:1f:8a:e7:4d:c3:6c:81:d1:84:1d:44:38:
e9:87:00:f0:51:ee:ec:f7:cf:bd:fa:be:f8:f0:ba:
37:a0:fc:6d:e6:f8:d8:6a:8d:b8:60:62:f6:3c:4b:
9c:e5:6b:d3:d5:1d:24:b4:2e:ee:45:5a:5b:60:05:
e4:4f:6f:aa:08:19:d5:7d:de:a8:e0:26:99:fa:4e:
59:9f:45:df:7a:ab:09:2b:89:33:76:1e:bd:a1:fd:
9e:90:4a:c0:d5:b5:cd:28:46:b2:64:cd:9b:6c:7e:
e5:26:a9:f4:81:7d:07:df:a4:98:ce:6f:be:af:39:
18:73:3a:0d:cb:eb:66:80:1c:ef:b0:5e:78:62:8c:
3b:ae:8f:77:bc:4e:38:b4:11:81:f2:5f:b3:b7:cc:
fe:ff:13:f1:f2:01:f8:fd:76:8f:9c:5e:45:f2:68:
71:74:37:99:59:d7:2e:51:fe:92:42:ee:cf:e9:90:
ff:e0:8e:e6:3c:d6:62:75:57:66:16:ac:57:d7:e9:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:6D:46:AA:21:FD:1C:A2:29:14:B4:B6:FC:73:F2:35:40:8C:5F
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2b:6e:6f:18:62:f0:0a:c1:85:c9:66:95:b5:6d:4d:1c:fa:
ff:da:04:5e:03:9f:19:31:fd:e5:bb:82:b2:12:8d:84:52:11:
3b:bd:0e:a1:54:19:22:50:c2:d4:01:33:9d:64:f8:57:20:0b:
35:e4:71:1f:dd:b5:67:fe:a1:ed:38:e1:cb:be:99:51:84:ea:
8d:2c:fd:32:a4:15:87:80:dc:f2:90:92:da:f1:71:15:75:ce:
3c:67:f9:de:d7:03:c1:4e:48:22:f1:c4:69:e9:2c:35:5c:f8:
e8:21:15:6a:8b:f4:b5:54:24:88:7b:80:2d:d8:aa:3a:f6:48:
34:a0:54:c3:00:b3:81:dc:44:d3:fe:88:1b:3d:b1:f8:92:e8:
ca:ac:a6:92:b1:1d:3b:73:cb:13:5a:20:6d:a4:5b:a0:84:f0:
c2:9b:cb:c0:23:f0:b4:9f:34:56:2e:24:a3:e5:ec:27:a8:0b:
77:fa:75:2b:a8:eb:50:fd:c2:46:df:40:9b:6a:41:aa:7d:1d:
d5:e0:a3:23:81:a4:fe:8a:0a:3a:68:03:d4:4c:15:67:2a:1d:
91:a4:d3:33:47:e6:8f:57:0d:34:7a:61:25:4a:43:00:97:e0:
2f:07:10:a8:3b:33:6c:80:9d:2b:2c:a0:57:09:28:f0:ec:07:
f2:d9:15:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:58:41 2025 by rpki-client