Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: kqeiIGGlWrD/1nJC1JbXGzctmC/rWlmIPi9ayor/C34=
Subject key identifier: 47:43:85:F5:79:DB:98:05:81:15:4C:3E:7A:9F:9F:5D:DE:02:78:4B
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 01975E6F2FD1B6DE0AE49D0DD29F6A8FD66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 13DC
Signing time: Wed 11 Jun 2025 10:00:34 +0000
Manifest this update: Wed 11 Jun 2025 10:00:34 +0000
Manifest next update: Thu 12 Jun 2025 10:00:34 +0000
Files and hashes: 1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: KKLOlv2b0l7tEKA0sdsEOccNLbUDXxFJOgRVHhfhbS8=)
3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:2f:d1:b6:de:0a:e4:9d:0d:d2:9f:6a:8f:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Jun 11 10:00:34 2025 GMT
Not After : Jun 12 10:00:34 2025 GMT
Subject: CN=474385f579db980581154c3e7a9f9f5dde02784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:ad:85:61:70:4f:76:76:9c:ba:d4:f0:66:
69:9b:0c:20:9d:c4:f0:75:1c:bd:78:53:ce:17:bc:
d3:8d:1d:8d:79:e3:ca:b7:b1:d1:1e:2c:70:4f:75:
cc:13:d2:3c:3d:6e:5e:37:bd:00:ee:ac:d1:ac:50:
c0:fb:a3:7f:51:42:67:9b:f3:7f:36:da:7a:f0:db:
7d:11:4a:18:c5:37:71:aa:80:d3:b4:10:55:2d:9e:
8c:6a:3f:97:17:1f:6c:73:17:01:1e:86:98:27:0c:
87:2d:f9:ba:6a:63:47:f0:be:1f:cf:48:a3:ab:89:
3d:00:59:8a:80:69:ff:9e:39:29:4c:9f:6b:33:9d:
3b:85:b5:e8:9e:2c:c8:80:a8:3a:ea:af:3e:51:54:
03:be:02:3f:55:3c:b4:24:24:cb:c4:e0:ec:91:45:
e2:33:47:bf:65:1e:ae:57:7a:eb:ed:f5:64:00:f5:
ef:3a:af:bf:a3:1e:10:6c:f3:47:4f:f0:73:b3:a2:
d8:80:ed:92:19:63:db:a4:f1:27:15:2e:43:dd:cb:
af:06:5f:53:2f:30:ed:5a:44:d7:cb:c5:aa:a6:9d:
a5:21:b9:e7:57:f7:17:2e:8f:f9:8d:ae:ce:00:b5:
03:82:3c:05:49:5d:24:f9:c4:b2:11:64:bf:43:75:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:85:F5:79:DB:98:05:81:15:4C:3E:7A:9F:9F:5D:DE:02:78:4B
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:db:a6:65:ad:4d:22:63:f6:fc:d1:15:f1:df:f7:6e:86:cd:
10:30:b4:72:a1:ec:83:96:5b:ec:dd:b8:ec:18:5f:70:66:de:
9e:f6:37:89:c2:de:3a:74:3f:ff:2e:d0:c7:8a:5b:a5:fb:79:
ac:31:7d:6e:f5:b6:0f:e5:e7:5a:b5:51:da:fe:f6:05:eb:a1:
77:32:8e:db:30:7f:77:0c:c1:82:45:70:95:28:51:76:b8:68:
28:ac:c9:6a:3e:2c:f8:7a:fd:ff:1a:c3:4d:2a:39:16:c7:d8:
ca:1a:63:d1:cc:1e:a7:54:29:b6:74:31:28:93:4f:bb:c0:a1:
e9:a1:35:ec:2f:eb:33:12:d0:9d:ff:9c:d2:e9:77:22:46:32:
24:45:d1:99:70:bb:cf:38:27:14:d9:d4:81:61:52:d5:a0:3d:
05:02:ef:6c:14:ba:bc:7d:9f:f1:c3:09:13:d9:9c:5a:ae:0c:
84:53:88:72:0f:be:b1:34:73:76:ec:9a:bf:90:2d:31:59:c5:
81:06:32:e6:53:01:b8:1a:88:5b:49:70:3a:60:2b:de:cf:de:
8a:15:f5:68:df:5a:4c:b1:14:31:33:d2:6c:de:98:cb:0e:34:
cb:5f:1a:fb:46:56:24:06:e0:de:59:fb:3f:82:c3:12:91:b9:
6e:6b:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:39:01 2025 by rpki-client