Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: VmygtnAFk0jhD7wGxb1n0kzlIQXHxehbFxHAlDghQyo=
Subject key identifier: CE:5E:2B:FD:D5:81:3B:EB:00:57:1F:E0:F2:A5:40:50:71:BB:72:96
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 019752A2BAA4762F8683A6FD097BBADF1341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 03:01:25 +0000
Manifest this update: Mon 09 Jun 2025 03:01:25 +0000
Manifest next update: Tue 10 Jun 2025 03:01:25 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: SqoY8ztN3mjvDp3fKZk1dm15bmy6xG5HtbQEzxLovHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:ba:a4:76:2f:86:83:a6:fd:09:7b:ba:df:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Jun 9 03:01:25 2025 GMT
Not After : Jun 10 03:01:25 2025 GMT
Subject: CN=ce5e2bfdd5813beb00571fe0f2a5405071bb7296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:d4:c0:53:eb:dd:8e:9e:20:74:2f:b1:4c:
19:79:26:3b:68:40:8c:c2:1b:65:b8:ab:72:89:2b:
72:09:ec:72:92:b4:b6:e3:84:61:7f:36:9b:66:50:
b8:01:8c:6f:a0:62:90:74:e0:a8:91:76:f0:ff:7d:
0c:c2:ea:54:31:73:69:7e:d9:f1:fe:f3:98:b1:dd:
cb:75:15:0e:86:e7:fb:a3:ce:cc:ff:66:68:55:ad:
9d:a0:16:fc:4a:b5:e6:89:dc:62:75:62:2e:1f:85:
d3:87:cc:1f:4a:39:0b:f9:46:42:70:1b:7a:49:64:
71:49:0b:2e:75:94:a1:17:a7:74:bd:56:e3:90:90:
3e:10:41:04:5e:95:f5:cf:83:7f:34:d7:25:35:f4:
dd:e8:ab:5a:ce:77:93:a0:d9:8f:ac:ce:ce:61:98:
dc:d5:8c:59:f4:a9:2f:08:5e:ce:e8:19:59:06:7c:
16:49:33:7d:c8:7a:72:f2:a4:6b:9b:3b:a3:e7:cc:
0d:3a:a3:77:99:7f:ab:3d:6c:11:31:cf:95:dc:9c:
0d:ad:2e:47:3e:a1:6e:e1:27:f4:be:64:36:43:5f:
f3:72:44:d8:c1:86:f0:f5:64:6d:cf:70:f3:a1:3d:
9a:b1:00:93:b2:ef:b2:f0:0e:01:43:8d:e7:2d:b8:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:2B:FD:D5:81:3B:EB:00:57:1F:E0:F2:A5:40:50:71:BB:72:96
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:b3:b6:9c:12:eb:4b:4d:a0:19:c5:df:bd:88:ac:51:79:
78:7c:3a:f5:1f:e8:e5:6e:ac:96:5c:09:bb:3c:70:06:b9:a3:
1d:6c:c8:d6:54:f5:88:97:25:02:c7:4e:5d:bb:05:9d:aa:4b:
8a:7a:fa:4e:b9:9e:1f:45:e9:f3:67:da:78:81:dc:a5:d4:66:
37:52:00:28:55:c0:86:3b:ba:16:18:17:68:7e:59:67:cd:1f:
ba:d8:30:de:47:9b:ed:d5:65:9c:d0:04:f5:7f:07:8f:4e:0e:
71:b2:8f:42:93:cd:33:62:26:76:7f:1c:7b:9a:0d:6a:00:6e:
7f:39:b3:30:ac:d5:5a:95:ae:07:5b:e2:d7:52:d6:b0:ef:6d:
72:30:72:64:08:52:55:18:22:e1:1a:ee:59:d7:52:f6:f5:97:
75:77:81:15:e8:49:31:79:16:0b:b5:67:52:89:7d:3d:55:15:
ae:34:7d:44:2a:00:8d:31:26:ac:4d:b2:cc:5e:a2:c7:2e:90:
98:cb:00:58:82:10:30:3b:bd:a2:99:b6:76:11:59:1d:6b:e0:
04:a0:e1:bb:39:7f:6b:06:d7:2e:aa:cf:9c:90:f7:2a:02:f4:
91:ae:30:49:9a:b8:ed:e6:44:52:e9:d9:10:15:81:91:14:07:
fb:a9:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:06:06 2025 by rpki-client