Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: 6jaWTLzM+5g0bEn7TKLeTWtVpPxuUqnyHDoUzJxzx8E=
Subject key identifier: 2D:7E:BA:79:FD:38:B7:1E:66:66:2C:50:74:0D:97:A3:9F:32:EC:1C
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 01975AC96362DA86BFC2CEC106E4BF0D88F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0BBE
Signing time: Tue 10 Jun 2025 17:00:36 +0000
Manifest this update: Tue 10 Jun 2025 17:00:36 +0000
Manifest next update: Wed 11 Jun 2025 17:00:36 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: eN8Czbe2Ri6+ZPpGQJ9p8y2nAEa+eudP3WVytw9bmdc=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:63:62:da:86:bf:c2:ce:c1:06:e4:bf:0d:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jun 10 17:00:36 2025 GMT
Not After : Jun 11 17:00:36 2025 GMT
Subject: CN=2d7eba79fd38b71e66662c50740d97a39f32ec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:97:f2:41:04:b1:f1:7f:86:29:b5:0e:62:4c:
61:f5:12:13:dc:8e:a2:c8:c1:5e:57:c5:cd:61:b8:
b6:d6:08:96:9e:a0:b0:3d:b4:83:47:e4:81:b0:f5:
45:9e:5c:e1:90:94:3b:49:0a:6b:bf:48:e4:c9:38:
06:f6:90:da:99:d4:86:34:08:0a:ec:c3:7a:09:f0:
4f:88:cc:69:d7:d7:73:e5:5d:ee:34:5c:55:15:46:
8b:ba:a8:22:59:d5:18:a1:3e:e1:c7:f5:86:24:38:
00:94:35:7c:f3:52:87:2e:22:a0:a5:b3:b0:71:47:
af:c2:b7:2d:18:bc:94:f2:4f:fd:e0:82:2a:41:23:
c2:47:b7:c4:ad:3c:1f:f5:8d:7c:01:ab:e7:fa:41:
d1:ba:c8:48:38:6a:c2:6c:ae:98:05:57:ef:90:9a:
e4:7b:9b:23:f5:49:70:1b:ff:0f:1d:1f:b0:7d:74:
08:23:00:1e:b1:9e:66:4d:bc:2e:8f:37:6d:7a:2f:
bd:5d:9e:d4:aa:48:32:a4:97:0e:96:ae:d2:66:e7:
86:87:00:a0:88:8e:a8:6a:8d:84:71:68:d0:f3:a7:
fe:66:45:54:0d:ae:58:40:ee:1e:3f:ec:81:ff:2b:
d4:e8:f6:cd:2d:b0:e7:22:82:ed:fe:70:f4:5d:83:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:BA:79:FD:38:B7:1E:66:66:2C:50:74:0D:97:A3:9F:32:EC:1C
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:08:b9:62:b6:d3:83:4d:2e:ae:ba:4d:e6:11:cf:5a:b0:1d:
5d:72:6f:80:2c:23:81:81:f0:3a:82:1d:97:a8:ed:a5:9f:a6:
90:e4:41:2d:fb:fb:7a:fe:ea:1d:35:3c:1f:69:24:5b:63:f5:
a7:60:ae:d4:87:3e:ed:f6:f6:d5:26:37:f4:f1:ee:ac:8d:3c:
0b:03:93:62:93:3a:d4:e3:92:de:df:a3:68:7b:00:fd:9f:46:
5f:4a:e6:9a:81:35:36:cd:68:f0:84:ef:c5:d7:ce:83:e5:94:
ca:db:4e:cf:35:22:aa:3b:b5:f8:79:af:1b:a3:1c:74:5d:a1:
2a:53:9a:5b:21:e5:5b:97:5c:ca:ed:2d:fa:ba:17:91:f1:75:
c5:2b:09:37:3f:3c:a3:9e:00:79:12:98:fc:15:b3:7b:d5:bb:
55:54:b2:f5:2f:0a:50:15:93:84:36:68:68:c9:2a:da:3e:a6:
53:0f:a8:f8:24:bc:98:48:3f:3e:75:14:72:51:6d:ed:8c:53:
4d:01:49:5f:e3:62:65:64:cd:1c:d5:77:b6:8c:0c:07:be:20:
75:64:0d:38:5e:06:04:cd:ab:fd:60:43:a3:b9:05:ce:6a:0c:
e0:56:a5:f9:da:78:5e:34:3f:dc:98:87:8e:10:56:2e:46:b2:
fe:9f:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:40:17 2025 by rpki-client