Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: GTZoHXhe/fE7AwqEbI91L5mphxHc7vI5iVaUFufE/t8=
Subject key identifier: ED:8A:F2:F7:25:49:88:79:22:68:8B:F4:12:29:7B:E9:DD:F1:F9:E4
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 01974E5832E7901CEA40502C3E5D176D4FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 07:01:32 +0000
Manifest this update: Sun 08 Jun 2025 07:01:32 +0000
Manifest next update: Mon 09 Jun 2025 07:01:32 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: mmVZHWM4bvt7svzsrDF4+30bPks7LVtPeZkze9H18XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:32:e7:90:1c:ea:40:50:2c:3e:5d:17:6d:4f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Jun 8 07:01:32 2025 GMT
Not After : Jun 9 07:01:32 2025 GMT
Subject: CN=ed8af2f72549887922688bf412297be9ddf1f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:ad:28:5e:8b:0b:d9:f1:f7:4c:39:d5:f8:
13:2d:5f:84:dd:e8:7f:e8:5f:f8:8a:43:6c:ba:ab:
a0:24:bf:4a:1c:e9:dc:fd:5c:a9:38:42:52:3d:bd:
a2:65:00:8c:26:5b:ed:f3:3f:19:6e:2f:11:10:ab:
8f:3a:e8:63:c6:f0:6e:cd:c6:20:63:88:7a:58:c3:
cf:28:3c:49:6a:4d:77:90:d7:67:c4:27:84:aa:99:
90:9b:8f:ac:ce:a3:ce:c3:ac:cc:9c:13:0f:95:04:
49:09:2b:51:13:bd:33:4d:3e:5b:4d:33:69:14:b8:
c5:b7:77:84:4a:52:71:0c:02:a3:27:cd:ce:f4:cc:
e5:95:f5:61:d3:ee:e3:41:68:c5:77:7c:fb:0e:eb:
61:c1:31:0d:1c:8d:86:56:6b:0e:50:16:e9:4a:d0:
ee:3f:ef:ed:4f:6b:aa:af:8a:9f:1e:8e:90:b2:c0:
a3:a9:ae:6f:53:d7:0e:5f:82:92:91:cd:e8:87:f1:
b5:3c:63:e7:d2:9c:3b:8f:22:9e:53:1c:1b:10:a2:
07:cf:40:3c:1a:59:87:35:ec:e1:e1:df:be:c4:14:
3c:da:82:1e:d9:4d:1b:db:25:13:73:53:12:e5:ce:
89:79:59:0b:f2:d3:2c:4b:b4:05:61:e5:db:88:ff:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:F2:F7:25:49:88:79:22:68:8B:F4:12:29:7B:E9:DD:F1:F9:E4
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:13:ac:b7:c2:16:53:0e:a8:f9:62:97:ad:38:26:16:bb:
e8:9e:4c:2f:b3:9b:83:06:b7:1b:99:8e:49:0b:32:46:75:0b:
85:17:24:c6:45:b1:3c:85:f3:0d:3c:99:12:cb:0b:32:60:da:
95:ee:84:d4:f9:b0:50:cf:f7:64:86:8d:a4:ff:54:87:7c:e4:
7b:5d:32:21:ef:4a:5c:e0:94:6e:26:ca:36:ab:5d:4e:94:14:
f8:eb:c2:a6:36:74:3e:8b:e2:a7:02:c8:00:0c:4f:75:9a:bb:
cc:ec:77:c0:2e:bc:de:d0:de:92:bc:ed:8d:ee:c5:4d:8b:00:
eb:8a:43:18:be:65:cc:2d:f7:e0:66:70:28:88:5a:ed:a1:9e:
d6:36:df:43:b5:53:3c:d0:16:a6:1b:94:a6:31:94:67:82:be:
4d:8c:b8:10:1d:f6:9a:91:5b:9c:d6:38:aa:4e:e5:a5:ff:28:
9d:2d:96:0a:21:b5:4f:84:50:e8:5c:88:16:0c:ed:09:a3:1b:
c6:3a:8c:3e:88:09:30:0f:d9:4c:66:58:32:a7:21:3c:18:e5:
b5:e9:ce:13:4f:2c:a4:ed:42:9c:13:af:de:eb:3f:f6:17:69:
1b:72:1a:e0:a2:7d:24:44:9b:94:83:f6:6a:b9:07:ea:21:a7:
02:1b:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:41:47 2025 by rpki-client