Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: pJIfLRASj8q3hMcn416ZkuVJSCAt6Ywm6BNunK94H0I=
Subject key identifier: E4:5A:DE:02:48:67:EB:0A:FD:6E:17:BA:60:6C:D5:4D:E7:0C:34:E3
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019756B56CF60EFD54DE9A404D0DC2862E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1588
Signing time: Mon 09 Jun 2025 22:00:19 +0000
Manifest this update: Mon 09 Jun 2025 22:00:19 +0000
Manifest next update: Tue 10 Jun 2025 22:00:19 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: 3rh3fgAntAEKIrzuSaEDGxOsiXTWGtL8vXJTGDDMOpo=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:b5:6c:f6:0e:fd:54:de:9a:40:4d:0d:c2:86:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jun 9 22:00:19 2025 GMT
Not After : Jun 10 22:00:19 2025 GMT
Subject: CN=e45ade024867eb0afd6e17ba606cd54de70c34e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:a0:5e:d3:54:7b:ae:b2:ed:cc:7e:4b:5c:
5b:eb:06:db:bd:37:32:23:d0:f2:35:5d:67:e1:53:
0b:69:a9:93:46:14:fb:81:ab:2f:e5:02:b6:2b:c1:
41:51:07:37:1e:f2:96:8c:a5:a7:32:01:a4:d4:ff:
f0:07:45:f9:cb:8f:42:50:5c:4f:64:58:da:56:15:
2d:57:01:b0:f0:65:1b:cd:74:a5:8b:f4:07:d2:b3:
5f:7b:14:c8:6d:64:b7:d4:a3:13:27:a3:0e:de:9c:
dc:de:c5:fd:e4:0f:59:e4:c1:c1:9c:d3:1d:87:ec:
ef:c4:cc:4a:82:6f:d4:e1:ac:86:ae:e3:54:b0:fe:
22:be:43:25:c5:0a:21:97:85:df:08:df:db:fe:bd:
4c:cd:43:8e:69:00:0a:1a:10:5e:15:44:da:ed:1d:
d7:8a:b5:ba:8f:21:a7:86:f2:9a:a9:e8:48:1c:db:
31:b7:a9:6a:9f:56:d9:6f:5f:7d:ef:bf:95:ed:c4:
a6:4a:d0:ab:ac:91:fa:08:40:fe:68:37:eb:db:95:
5c:88:72:d9:b6:f0:4d:2a:cf:7b:5f:f5:ad:f0:e1:
df:ed:75:cb:02:57:c9:a8:d7:30:b9:d3:58:df:fb:
7e:ec:74:9a:47:50:2c:25:23:35:eb:49:30:88:52:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:DE:02:48:67:EB:0A:FD:6E:17:BA:60:6C:D5:4D:E7:0C:34:E3
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8a:2b:38:18:0c:6c:96:92:00:4f:9d:df:59:08:8f:f5:68:
49:d1:7b:a8:8b:84:cb:97:41:b8:9f:c8:ed:6e:9d:b5:52:0e:
6c:72:c1:b5:ab:62:a9:57:5a:94:89:78:39:bb:ec:de:99:f2:
65:44:67:a5:5d:5b:ee:e3:a4:ab:61:3f:7e:4d:50:bd:dc:09:
43:70:16:5f:88:cb:0c:a5:47:ab:bb:9c:6e:8f:6f:17:00:41:
62:70:38:2e:ef:dd:f2:e7:25:ea:e6:ff:a6:34:e6:33:7d:9a:
a0:03:bf:73:7a:39:f5:10:58:77:53:5d:8b:f8:fa:4b:16:9f:
c8:1b:6c:d2:0c:72:cd:d0:57:ec:27:b6:4e:83:ec:a9:04:2a:
73:1e:54:66:ce:14:db:46:94:56:fa:65:c8:9c:f1:79:d3:ec:
8a:5e:1b:60:6f:70:35:70:4b:e9:f1:c0:34:5e:f8:57:30:e7:
52:70:81:11:f7:71:1c:99:81:b0:05:da:5c:6e:65:34:fd:1d:
c5:89:db:88:d4:87:fd:a4:ad:90:73:7d:87:7b:b9:1f:ff:7b:
c5:54:7b:61:2a:12:51:1b:fd:88:c2:1d:72:5c:d3:d4:a6:13:
d9:9d:48:b2:01:a3:63:3e:a5:3e:b1:60:7b:9a:ac:94:bd:3e:
c6:0b:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:30:01 2025 by rpki-client