Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: /Z0/fcwcVHTT83uGZB7dXoadoKW53yhcOXzCeYYU9Og=
Subject key identifier: 59:59:63:B4:1A:85:77:51:85:4A:64:E8:11:FD:4A:0C:70:02:84:E4
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 01976817AC75CF7E65CAE89615E472C0CF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 07:01:11 +0000
Manifest this update: Fri 13 Jun 2025 07:01:11 +0000
Manifest next update: Sat 14 Jun 2025 07:01:11 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: bztO83sHVkKz2xGtu+WOa72R2pBbLx3u3laB3S3Q5vM=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:ac:75:cf:7e:65:ca:e8:96:15:e4:72:c0:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jun 13 07:01:11 2025 GMT
Not After : Jun 14 07:01:11 2025 GMT
Subject: CN=595963b41a857751854a64e811fd4a0c700284e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:0f:37:a8:48:b0:5b:59:27:47:6f:21:14:
65:70:e3:d1:e5:04:3e:d9:32:78:2c:06:5b:a4:71:
90:f8:ce:3c:12:e7:f1:f7:9e:a3:27:a9:fc:37:53:
05:16:e9:38:93:de:e1:f8:3b:91:c7:b8:c3:c8:b2:
cc:7a:16:72:53:7a:70:3f:e1:ea:f1:06:09:d7:2e:
df:5c:d3:4c:62:53:0d:71:21:1f:5c:10:81:88:ac:
1a:c8:e1:16:d2:06:a9:63:2d:b8:ee:b4:3b:77:ef:
7f:20:75:43:e9:5e:67:86:d9:2b:88:ad:21:51:49:
2f:87:16:9f:a9:35:3f:f6:bb:c7:97:ed:75:37:16:
72:85:74:a5:8a:2d:a5:f2:e9:78:60:3a:8c:8e:a8:
b4:4a:9c:b7:b1:40:64:f0:f1:e8:43:e9:dc:6d:2f:
36:d4:aa:73:ea:a7:18:84:8c:1e:04:ba:43:12:13:
3f:d2:9c:9c:20:11:61:dc:b0:07:de:62:75:80:84:
5b:a4:a2:1f:04:6c:e8:09:81:91:fe:ef:54:95:40:
e1:c2:ea:b1:b6:96:f5:a9:67:a0:76:14:a8:87:85:
c9:b3:a7:72:d4:0f:82:29:4a:f6:59:cd:a4:aa:5c:
1c:93:2b:70:7d:51:3c:cf:42:bf:b1:32:b6:ba:6a:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:63:B4:1A:85:77:51:85:4A:64:E8:11:FD:4A:0C:70:02:84:E4
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:a8:ba:34:02:1d:0a:13:6c:1b:0e:ca:8b:09:a6:d0:7e:
cb:d0:f8:d2:19:f9:5a:db:92:87:67:e7:65:91:92:a2:09:5e:
eb:8e:55:ba:d0:56:81:be:ba:7b:8b:23:fe:27:88:f1:6b:2c:
af:a3:0b:9f:27:10:a0:59:ce:93:f2:82:c5:86:a9:ee:54:a4:
8c:91:2a:5d:cb:6c:ed:fe:78:95:63:cf:e2:8e:9a:f6:54:f4:
84:62:2f:bc:b5:b8:11:cd:af:56:dd:c2:0b:75:d7:da:cc:ae:
e6:1a:7f:93:92:2f:f3:e6:de:53:cc:37:e3:82:3f:39:0c:59:
17:08:a2:42:16:87:c0:6d:e1:f1:57:ca:e7:77:2f:9c:ea:6d:
7d:8c:86:50:ce:ec:04:e8:47:42:0c:81:4e:5b:40:25:43:0e:
87:df:3c:4d:69:03:1a:21:09:8b:09:d6:06:b3:f1:55:16:15:
26:ed:bc:b9:b0:ae:58:af:ba:24:b7:d2:c8:90:4c:04:7c:40:
2b:bc:2d:05:20:b9:46:c0:62:e9:94:05:63:0d:eb:6d:81:0e:
00:83:66:6a:89:d6:11:76:d7:cb:2f:f6:39:05:73:30:59:0c:
1f:c3:17:42:53:2d:7b:d1:90:03:ea:be:6b:d5:77:f2:96:8c:
1d:ce:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:00:29 2025 by rpki-client