Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: GAzgE5xJpvMNFdR+zZ5YxCTKJLNf3TInBg4YXpkHq54=
Subject key identifier: 4D:E1:32:F2:2E:3C:88:8E:ED:21:48:D2:E2:79:CE:E9:E8:8B:DF:EB
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 019763CCBB0425EB3AEAE7B314A2DF03F98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 11:00:50 +0000
Manifest this update: Thu 12 Jun 2025 11:00:50 +0000
Manifest next update: Fri 13 Jun 2025 11:00:50 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: UHosI7dtJlwnHfBfmJ5r5wAXjkZuiEKd4icsbH2Tdc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:bb:04:25:eb:3a:ea:e7:b3:14:a2:df:03:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jun 12 11:00:50 2025 GMT
Not After : Jun 13 11:00:50 2025 GMT
Subject: CN=4de132f22e3c888eed2148d2e279cee9e88bdfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:30:5a:0f:b8:37:1e:88:18:54:c6:34:16:
9b:c7:f2:a8:54:b7:1d:c8:67:37:99:ed:b9:d7:6e:
af:05:27:0a:d7:89:93:22:14:17:ff:bc:7f:8a:d0:
21:12:ff:f2:28:e8:4e:e6:1e:9f:6e:2d:68:f9:0c:
4a:5a:d0:4e:9c:cd:8f:da:1a:fa:62:c7:5c:ae:17:
f7:14:18:ee:3b:ee:cc:e1:b6:57:c3:0e:58:76:e5:
df:70:f2:e6:8d:8f:01:17:a3:15:62:82:17:d5:3a:
5c:12:5d:bc:83:75:ce:9a:aa:7a:a0:66:3c:86:59:
5f:9a:95:4d:3e:27:d4:73:56:a0:50:96:c3:d7:42:
75:4a:9d:a6:72:68:a6:f2:3c:76:55:bd:7c:19:9e:
ce:a8:23:35:9b:be:33:29:ae:97:7a:17:26:c7:ff:
43:07:2a:a3:b9:30:a5:c0:82:59:e4:00:c7:8f:e2:
5c:13:2e:1d:c9:e6:1a:bb:5b:c4:cb:2b:a3:90:e4:
62:8a:f8:66:96:4a:88:62:f8:1f:da:a1:ea:97:b0:
18:90:3e:7d:73:e2:07:c0:00:3b:21:53:80:ba:47:
23:3d:9b:cb:71:31:9e:44:74:2a:93:b3:16:c7:49:
40:a1:52:1d:1c:50:34:9a:69:9b:1b:a8:9c:55:4f:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:32:F2:2E:3C:88:8E:ED:21:48:D2:E2:79:CE:E9:E8:8B:DF:EB
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:07:69:e8:8c:6c:fb:11:da:e3:14:7a:06:6d:e2:5d:c1:ec:
66:e8:37:1f:63:9c:d2:77:59:37:a4:18:fb:01:73:bf:c3:9b:
3d:3a:4f:2d:bb:eb:1e:7d:f3:33:40:52:55:d8:54:16:81:15:
97:58:d6:e6:16:0c:f9:01:aa:25:ce:c9:7e:df:6e:46:1e:07:
12:f3:a2:25:fc:43:65:d4:6e:10:b1:80:60:0f:c7:73:cb:21:
aa:c2:1c:46:99:42:9a:eb:81:4d:f5:ae:5f:ff:74:2a:84:7a:
fb:b5:df:85:ff:0e:5d:a5:3e:38:9a:8a:14:89:74:f9:94:fb:
71:f7:e5:03:59:83:79:fd:8f:08:7e:a3:eb:88:df:7f:3b:c8:
24:18:98:34:2b:07:7c:77:18:73:fb:51:65:4e:b0:b0:73:66:
65:bd:ee:df:ae:a2:75:db:ec:5d:08:e7:93:6f:6b:0f:64:5e:
a9:56:85:6d:ab:b6:a3:46:4f:09:d7:e2:a0:02:e5:2e:74:2f:
32:02:89:54:41:2c:04:98:a3:59:25:43:21:0d:4f:7d:d5:69:
44:82:db:01:31:08:cc:53:05:2e:22:6d:50:71:48:22:93:21:
d2:72:88:a1:e9:e9:e8:73:5a:d6:53:52:3b:92:9f:06:e8:e9:
50:85:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:51:15 2025 by rpki-client