Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: 0lS0w+dJkR0CnxctWzwdZqd7bZAJf+RzUuHFjIcTK0w=
Subject key identifier: C6:0D:90:3C:3A:B0:43:FC:D7:6F:E2:15:D3:40:59:29:C9:0D:0B:63
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 01974F6A1755FDF7BC81314A92AB26886FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0C38
Signing time: Sun 08 Jun 2025 12:00:42 +0000
Manifest this update: Sun 08 Jun 2025 12:00:42 +0000
Manifest next update: Mon 09 Jun 2025 12:00:42 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: 38oCL2YemoiONhipdPyoN+aorgYvM/tQvandefidXTk=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:17:55:fd:f7:bc:81:31:4a:92:ab:26:88:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Jun 8 12:00:42 2025 GMT
Not After : Jun 9 12:00:42 2025 GMT
Subject: CN=c60d903c3ab043fcd76fe215d3405929c90d0b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:2f:2b:b4:6d:85:cc:06:68:71:54:6a:ba:
57:20:6e:ea:3b:a4:c0:a9:b5:16:07:91:63:3b:a2:
d7:31:9c:86:6a:17:8d:3f:48:81:0b:b9:43:65:bd:
66:7f:b2:19:9f:ca:83:8b:98:45:16:9d:50:d3:89:
f3:3d:b8:c0:ef:7d:58:59:77:6e:b2:e2:76:e8:cd:
9a:92:00:28:73:b7:a3:8b:93:99:81:05:64:72:99:
e7:2c:60:ad:50:79:b1:7a:4a:b9:f7:9b:4c:13:75:
91:c8:88:4a:dc:da:d5:81:ba:ef:1f:60:01:33:86:
46:70:10:de:6d:fe:46:18:37:1c:f6:26:12:f8:73:
e7:d1:cd:04:72:b7:c8:b3:42:c4:6f:25:7e:fd:9c:
a5:d5:44:2b:d3:61:0e:ae:f3:0b:0d:17:5f:1e:51:
67:6d:cd:ff:4a:5e:59:1d:0c:16:5a:8d:b7:61:e6:
90:4c:23:d9:09:53:14:d2:de:25:2a:94:2e:6d:2f:
47:18:a9:89:21:e3:2f:c8:d6:10:de:d1:ac:02:dc:
b8:28:03:f7:5b:d7:ce:c2:f4:33:09:41:db:3b:d0:
ec:22:d1:0b:6c:ef:9c:4b:a9:ae:2b:0c:c7:40:a4:
d7:7b:5a:1e:e7:a9:59:0b:1d:52:11:2f:58:81:6b:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0D:90:3C:3A:B0:43:FC:D7:6F:E2:15:D3:40:59:29:C9:0D:0B:63
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:5b:16:93:d6:9a:ef:59:40:22:eb:d4:31:9a:99:9b:df:
4e:bb:0c:6b:d1:64:2f:a5:cc:69:1d:97:88:df:16:29:fc:67:
4e:77:d1:88:04:ed:b8:5d:3a:ba:2a:fd:46:ba:d2:e8:7c:d7:
97:b5:fd:d3:84:95:df:7a:f2:00:c1:8d:80:29:f9:62:3d:10:
22:f3:21:fc:93:ef:19:80:51:5a:af:c7:d3:28:4f:49:60:cc:
3d:8f:8e:cc:c2:c5:4f:ab:72:40:22:7d:88:f8:b4:7c:e0:34:
06:e8:fb:d4:af:72:17:99:99:99:20:e4:58:aa:bc:d7:fa:35:
6e:1c:30:8f:89:f6:53:d2:fb:cf:b5:a5:31:f4:91:d7:96:ec:
43:da:fe:6c:6d:b3:8c:df:f8:23:67:43:b0:88:13:e8:61:63:
84:9f:70:eb:b2:8b:0b:ea:dd:7f:41:e8:fa:de:fe:57:93:e9:
b1:c8:d6:74:11:cc:85:38:ae:77:3a:7b:da:92:d5:f4:10:89:
7b:e3:29:9d:9a:d2:ba:4c:76:22:20:9b:10:7b:9d:cd:de:72:
ee:ba:15:dd:2f:45:b6:f5:bf:6a:09:b1:4d:14:7e:4b:df:7e:
b0:14:d6:59:97:f5:c7:87:0f:7c:44:b2:48:c4:ab:c9:c9:f9:
5b:53:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:52:43 2025 by rpki-client