Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: 10Bf+wCChrYjHs0ZmSEzgWQWqCeNFYjmgwE8Ms1OTxM=
Subject key identifier: 6C:01:CA:B6:F5:C4:4A:30:8C:31:83:DE:72:5E:F2:58:BD:F7:38:6F
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01974B1F49F608BB472F7F2B60AE6326F6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 15E1
Signing time: Sat 07 Jun 2025 16:00:31 +0000
Manifest this update: Sat 07 Jun 2025 16:00:31 +0000
Manifest next update: Sun 08 Jun 2025 16:00:31 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: TR556Aqcbdwe85oKaRKfnatvMkRugO/RjNxLjNnMWcI=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:49:f6:08:bb:47:2f:7f:2b:60:ae:63:26:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Jun 7 16:00:31 2025 GMT
Not After : Jun 8 16:00:31 2025 GMT
Subject: CN=6c01cab6f5c44a308c3183de725ef258bdf7386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:a9:ba:1e:1b:d8:52:04:e9:cd:b0:4c:cb:
2b:78:05:73:41:ec:3c:f1:d3:a7:86:47:24:b7:09:
81:6b:ca:d9:4a:31:08:8d:91:f3:37:f1:a8:e5:26:
fa:aa:f5:ba:5b:e0:d3:d4:6b:5c:19:f5:87:6f:0c:
00:2d:fe:9f:67:1d:9e:9b:82:be:23:ad:df:2f:1e:
e5:f3:9a:40:77:03:7e:57:ca:17:f5:d3:2b:79:35:
80:9f:48:6d:f3:aa:54:a3:0e:ca:c2:ee:c8:a1:7d:
bc:5b:ae:5f:09:a5:ce:b0:90:a3:2d:e7:6e:d3:dd:
f0:91:6e:9e:1f:e5:67:8b:30:67:49:07:f9:22:c9:
95:a8:ae:aa:a9:75:e7:dd:bb:5c:3f:7b:f1:49:1d:
a4:0f:d1:14:d8:48:a8:0b:4e:3c:47:53:dd:f8:39:
3d:15:a4:6e:ac:82:c4:77:f6:97:80:53:c0:f3:08:
c2:64:19:79:29:9c:d4:48:35:52:a1:dc:2b:aa:95:
82:74:cf:ea:29:1d:13:75:e3:9a:41:14:94:ce:b4:
f8:c5:a5:44:30:53:1f:c4:3b:28:d9:f2:1a:28:21:
c7:1f:d8:6d:b2:44:5e:f2:3d:52:1b:62:56:c8:2a:
cd:62:47:5c:b5:2e:6e:25:3b:16:49:41:5d:95:37:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:CA:B6:F5:C4:4A:30:8C:31:83:DE:72:5E:F2:58:BD:F7:38:6F
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5a:66:2c:3b:cf:2b:08:83:f7:64:2c:44:af:4f:28:34:41:
4f:55:6f:9e:71:e8:99:53:00:89:50:43:3f:fd:30:d9:6f:aa:
c3:89:f3:26:aa:36:71:bd:73:46:e1:b6:13:1c:22:11:03:a1:
b8:30:7b:9d:e2:f4:f6:81:f0:12:44:7d:e4:ba:70:c3:db:3a:
e3:11:95:47:44:f4:1f:74:6b:18:7b:08:2a:d8:47:a3:f4:6a:
38:73:f5:4e:76:1e:c7:43:f1:14:8b:83:c3:30:bb:99:8e:19:
12:e4:5a:03:29:8a:de:ae:d3:98:23:ce:b2:70:2c:22:b2:0b:
8a:41:82:26:a2:55:a2:a3:bf:2b:d9:99:24:8f:19:b5:85:23:
6c:6f:2c:99:55:c3:95:4b:96:3a:38:0c:1e:c8:4e:cc:01:85:
20:cc:f8:04:c9:ad:32:31:77:83:11:df:48:10:84:66:cc:cd:
b9:a0:e6:f1:11:16:c7:16:60:b4:cc:67:c4:65:8a:9f:1a:79:
3b:12:98:00:c8:b7:c5:50:b4:99:61:b1:8f:79:9c:d3:1b:7e:
77:d1:a1:ed:9a:37:2a:df:a1:90:3e:61:9b:fc:eb:3c:70:83:
2e:1e:f2:6b:16:2b:cd:f7:75:3d:63:22:25:5d:91:e9:fd:12:
02:9b:2d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:40 2025 by rpki-client