Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: VVd2lPHbWOpMEOYEzYyN0l1roAVXqmMVTZoadv8qMSU=
Subject key identifier: DB:9A:F9:8D:80:9C:F5:8A:12:C7:35:2E:FC:76:F9:54:B4:DC:40:DD
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 019754C73D611BC781D8CD416ADAF46A4018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 13D7
Signing time: Mon 09 Jun 2025 13:00:32 +0000
Manifest this update: Mon 09 Jun 2025 13:00:32 +0000
Manifest next update: Tue 10 Jun 2025 13:00:32 +0000
Files and hashes: 1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: ZYUMX9rBze+VpEGknhA6gA1g1J3cNwG3yNCq2LbcZnU=)
3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:3d:61:1b:c7:81:d8:cd:41:6a:da:f4:6a:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Jun 9 13:00:32 2025 GMT
Not After : Jun 10 13:00:32 2025 GMT
Subject: CN=db9af98d809cf58a12c7352efc76f954b4dc40dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:3c:d5:44:f9:bd:b4:5f:a7:52:9f:88:c6:
f0:6d:6c:88:78:29:7f:9f:05:73:24:5c:4d:9d:07:
b8:a8:a1:57:ad:e3:59:02:da:29:a2:f6:77:5a:2e:
e9:26:d4:00:66:0d:21:58:c5:06:be:24:cd:c0:34:
8f:b5:23:50:e7:00:79:3d:c8:27:7d:e9:96:fd:ed:
15:41:0e:98:52:2e:8f:22:ec:60:61:9c:d5:3a:cd:
5d:c1:2d:cf:aa:be:ad:5d:db:f6:ce:38:0c:5c:49:
09:0b:36:37:aa:0d:b8:aa:b4:d8:28:51:54:6b:ba:
25:fb:40:38:4b:68:e3:3d:e0:2e:11:18:d8:b7:80:
1a:ea:2a:10:66:a1:d2:20:23:61:26:c8:69:2e:44:
6d:a6:12:a8:49:56:c8:57:10:da:4a:b8:36:10:eb:
70:b3:50:0b:61:dc:7d:69:70:a8:25:fd:31:72:62:
01:ed:79:16:6e:89:39:ec:eb:7a:e8:9d:e9:dd:ec:
f4:b0:27:cf:b1:f9:03:63:b7:47:be:2b:f4:58:dc:
8d:c9:e1:ca:48:38:6a:a2:2c:0d:a4:17:ae:52:87:
6d:65:93:20:90:8a:93:c2:0c:f6:bd:bf:32:90:27:
2a:41:c2:87:6a:b8:93:07:36:c9:67:12:4a:1d:f5:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:F9:8D:80:9C:F5:8A:12:C7:35:2E:FC:76:F9:54:B4:DC:40:DD
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d1:df:ec:a5:39:6a:df:81:1d:13:19:e3:cc:5c:53:45:76:
d9:a9:01:ef:a9:04:f5:98:cf:87:34:e3:53:34:9e:57:69:c2:
77:46:5c:40:64:e2:a2:ff:fc:75:6c:09:b4:0e:3d:48:2a:bb:
86:80:84:02:17:28:00:56:fd:54:ed:b3:9b:35:85:95:ec:83:
4c:4c:86:62:47:13:2c:57:82:b6:93:ae:83:fe:52:fc:da:ee:
bf:29:13:c1:90:8b:5d:95:1d:53:f3:06:f8:dd:8e:9d:88:9b:
21:c4:f2:8d:34:a0:26:4b:82:63:d8:fc:26:e2:05:f3:e2:03:
e6:09:c2:e8:d8:5f:bf:c6:9f:24:50:4e:4d:41:4f:75:01:c8:
22:8e:d3:62:bf:5b:7f:af:79:cb:cd:9c:f7:01:eb:59:c4:b4:
09:c3:2a:58:da:1c:14:66:20:8d:ba:19:3f:fa:f8:c9:24:be:
ad:02:2a:87:33:69:d8:75:af:86:4c:02:94:65:03:f8:d7:01:
62:dd:aa:dd:80:a5:64:35:37:36:aa:0e:2e:d2:6c:82:94:a0:
d0:5e:2c:2f:0d:85:64:03:a9:90:4c:41:33:12:51:ad:d7:7d:
62:93:b5:7c:32:c1:80:96:97:7b:b7:d8:31:48:c5:a8:79:36:
cc:3e:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:08:33 2025 by rpki-client