
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: jKaIYWXPEHnYrDhfTpqbQs2+uSebBbYOo7XPu+XA+DM=
Subject key identifier: 10:D2:D1:A1:A1:4A:50:38:86:ED:11:D3:2B:C2:B2:DD:64:00:E1:EA
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0197624BEF9C745419821B37D181AF64F1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 158E
Signing time: Thu 12 Jun 2025 04:00:33 +0000
Manifest this update: Thu 12 Jun 2025 04:00:33 +0000
Manifest next update: Fri 13 Jun 2025 04:00:33 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: XlyQwpG+664R73jrVZI6LAe/ma53nmY2sP7qWSOFGU8=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:4b:ef:9c:74:54:19:82:1b:37:d1:81:af:64:f1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jun 12 04:00:33 2025 GMT
Not After : Jun 13 04:00:33 2025 GMT
Subject: CN=10d2d1a1a14a503886ed11d32bc2b2dd6400e1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:97:69:37:d8:55:cb:3d:da:ac:9c:cc:8a:
88:24:40:2a:6d:ff:6a:7e:5c:0f:c4:7c:67:3b:be:
23:76:02:17:a0:e4:c7:bd:45:50:c7:55:b2:7b:71:
96:6e:89:f7:5a:27:4c:15:45:37:12:5b:2c:86:70:
52:85:79:05:cb:70:12:7f:68:5f:89:8f:7a:8d:95:
92:28:04:0d:7a:5b:33:de:d9:7c:71:95:c7:2b:e6:
63:bc:5a:ae:61:14:69:cf:22:36:4f:5d:5d:8c:c6:
4f:d8:f9:c8:35:03:22:41:f0:6a:cc:0d:a1:c4:01:
f2:dd:d7:16:b7:20:f5:d7:9f:e0:01:86:b4:30:d0:
b6:97:32:b3:67:71:d2:fe:c4:60:c0:e3:bd:17:ea:
39:54:ba:f7:48:65:c0:3d:10:fa:3f:c6:59:43:03:
f0:da:e5:a4:1f:ff:b5:10:01:68:7b:6f:3e:34:5a:
fb:9c:fc:c5:d7:83:19:0d:eb:00:50:7c:57:f4:3f:
05:f3:52:4b:6f:1d:5b:47:fc:02:20:e9:eb:84:9a:
6b:94:42:c9:0c:b6:f0:08:40:1b:dc:30:de:c0:97:
10:63:1e:d8:22:3f:e2:80:62:18:80:04:74:cc:3a:
18:56:6b:b9:53:87:6b:4d:fc:a4:2d:ee:0b:5f:fd:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:D1:A1:A1:4A:50:38:86:ED:11:D3:2B:C2:B2:DD:64:00:E1:EA
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:88:d3:b9:aa:ae:01:9f:ef:a5:d1:ba:8e:13:9e:44:65:01:
9b:eb:c5:74:16:e3:18:6c:fb:8c:53:9d:44:35:1f:4a:b7:d7:
10:36:0f:c5:4a:1e:56:e1:92:bf:d3:42:8b:0f:59:5a:1b:a8:
c6:89:b8:86:66:2a:d7:7d:4d:e5:a0:f4:b2:14:c7:47:9b:86:
a3:ac:d5:f5:70:4d:38:7b:18:a8:c1:b1:7d:ff:fc:71:81:6b:
c2:02:2d:76:ea:22:4b:c3:ed:e2:9e:cc:fa:37:69:b7:e7:06:
58:bb:5c:e3:09:9f:34:4f:ed:28:36:26:00:c7:78:21:63:92:
83:02:f2:82:e0:b6:4d:b0:59:82:0d:84:1f:b2:ab:6d:49:35:
6c:e1:7c:42:7b:2f:86:24:83:1a:8c:a3:12:47:cc:06:dd:25:
29:c6:22:00:65:2f:60:3e:d8:f3:72:ad:5f:6d:f1:f2:12:5d:
5b:dd:46:c5:59:5a:e2:2a:6e:00:2f:dc:f9:8c:2a:dc:14:be:
fe:33:ae:c7:8e:4c:db:15:7f:c6:91:f5:c1:a4:ec:24:e8:c7:
e7:61:92:6f:a0:84:96:dd:88:40:d6:7b:1b:07:cb:53:de:2d:
8d:51:e3:b6:f3:d0:eb:97:74:28:7f:72:7e:6a:e9:a4:13:c7:
f5:7b:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:20:52 2025 by rpki-client