Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: L13I5CIJextyhloIDOX2qwZWVefXNgGTsCr/TSLwXek=
Subject key identifier: 68:BE:90:37:92:A1:DD:4A:3E:BB:E1:CE:C2:25:CD:7A:E5:2A:BE:20
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 0197530FD1641C1767CD73E6FA45360F345C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 05:00:34 +0000
Manifest this update: Mon 09 Jun 2025 05:00:34 +0000
Manifest next update: Tue 10 Jun 2025 05:00:34 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: /n1GAcaVq4VEB6KjoaxkLLPzqZr9FVvIhCSsw17h7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:d1:64:1c:17:67:cd:73:e6:fa:45:36:0f:34:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jun 9 05:00:34 2025 GMT
Not After : Jun 10 05:00:34 2025 GMT
Subject: CN=68be903792a1dd4a3ebbe1cec225cd7ae52abe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:70:98:de:75:79:db:28:2a:ac:75:09:2f:
8b:a0:d5:0f:d0:76:26:c2:40:52:a7:d9:70:61:73:
72:e1:42:f7:7c:0c:3f:f9:a1:f8:f6:97:eb:7f:90:
35:ce:6a:f5:35:4f:28:e2:fe:cc:dd:cc:6f:44:4b:
2e:6f:b1:d6:7b:e6:91:29:3f:5a:74:b0:44:91:40:
d6:e7:65:da:c6:3a:bb:fc:09:6b:80:71:90:a9:76:
56:02:7a:c7:3b:cb:68:2d:2d:b7:fb:f7:91:02:d9:
9e:5c:f6:7d:57:dd:f9:15:37:b6:c9:dd:ab:66:0c:
be:e4:77:7d:ac:3a:7f:c4:50:8c:c4:32:5c:95:6c:
02:66:68:3f:7b:c1:99:2b:3e:96:5e:c8:69:80:37:
51:f3:e6:ad:2e:e4:e3:d2:aa:13:69:f1:c7:9c:24:
96:4f:4b:bf:43:2b:25:72:d2:ae:2e:da:ba:4f:a5:
70:3e:cc:81:74:f9:bd:69:4b:8f:7d:5d:40:89:22:
5e:ca:24:15:3b:2c:15:46:ed:94:0a:77:50:28:84:
d0:59:52:76:7c:38:72:dd:21:c0:c8:87:bc:03:f4:
1a:24:34:4e:84:c6:8d:34:d7:37:f7:9e:94:59:de:
75:19:f2:25:0e:e5:65:d4:bd:04:ad:38:f6:ca:12:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BE:90:37:92:A1:DD:4A:3E:BB:E1:CE:C2:25:CD:7A:E5:2A:BE:20
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c1:30:aa:03:76:ae:62:cd:fc:c9:6b:b4:89:34:df:1a:f6:
c0:0f:a5:37:0e:5b:68:fb:22:f2:94:63:9a:ee:81:f0:e0:9c:
66:7d:b2:24:c7:74:bf:18:e5:6d:62:a9:e8:87:f9:87:06:08:
63:1d:c6:55:f9:c5:fe:41:fb:0b:c7:cf:d3:4d:7e:fa:4f:41:
b3:cc:c5:80:c4:b5:4b:cc:ad:9b:6c:55:eb:15:b3:73:dd:b3:
2f:e7:fa:d4:e6:9f:ff:32:ce:1e:f6:19:97:56:09:6b:7b:1f:
c6:4e:13:62:b9:0e:14:be:a6:31:32:c7:25:a6:93:e3:55:ab:
07:73:c2:d3:dc:bc:04:4e:9f:e3:2b:43:8f:59:46:2a:a5:c0:
2e:88:e1:75:80:e0:c5:e5:c7:65:e1:cc:cb:c4:8d:bd:4c:67:
69:0e:ed:3c:9c:71:14:81:b2:0b:ba:2e:07:7b:8c:05:2d:b3:
9f:7b:d0:93:b2:31:fe:cc:23:ab:95:5f:70:f0:57:76:f6:5a:
f1:5c:98:4e:15:22:a2:14:15:80:53:42:6e:be:9b:52:f8:1d:
4e:49:0c:b4:47:91:2e:9e:55:b9:25:79:6b:53:10:b5:bf:f6:
d7:18:f3:c8:59:7e:56:4a:dc:e0:f3:f8:a2:30:4a:97:ff:1f:
94:47:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:56:56 2025 by rpki-client