Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: CqRZj6+o4ggkYWC6AKllrnhW+qg4XD1xZB08cKSWQkE=
Subject key identifier: 66:B1:96:8C:0F:D9:90:4B:90:0A:3F:36:4E:E0:18:3B:0A:58:17:43
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 01975459DD9A9220453E4EE11E57C7930CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 11:01:04 +0000
Manifest this update: Mon 09 Jun 2025 11:01:04 +0000
Manifest next update: Tue 10 Jun 2025 11:01:04 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: /oBhCcvDwp3cccVELIv5cFL6yuSmgKRtgf0fz+4n9l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:dd:9a:92:20:45:3e:4e:e1:1e:57:c7:93:0c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jun 9 11:01:04 2025 GMT
Not After : Jun 10 11:01:04 2025 GMT
Subject: CN=66b1968c0fd9904b900a3f364ee0183b0a581743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:99:24:64:fa:de:26:1d:ba:76:d8:32:c3:
e6:31:be:6d:74:98:b9:69:96:09:3f:2b:0a:98:8e:
27:c0:2e:b8:6f:f2:e3:d0:20:a6:d7:73:fa:06:81:
ec:71:39:3f:3f:50:02:21:76:96:09:23:e9:28:24:
c9:c5:94:7a:d5:b4:45:e0:8c:97:e4:85:d3:b1:c1:
d5:52:e9:f0:52:80:77:84:70:65:6c:50:fa:5f:e2:
38:8f:30:4a:71:d4:1c:a1:5e:00:a8:f6:ac:d7:c1:
d0:b6:9a:16:4e:c4:97:81:f5:f1:4d:24:81:23:e8:
67:dd:b7:8e:0f:24:35:bb:a3:46:11:63:97:2f:3c:
a3:60:b0:ae:7b:78:45:c9:a5:85:6e:59:f4:55:d9:
83:b3:03:9a:f1:6b:76:6d:51:6e:a8:ed:1b:b3:f2:
aa:05:cb:2b:98:ef:68:9f:e8:f7:71:ae:82:48:a4:
49:aa:21:5b:78:52:73:ee:9f:74:f4:18:41:27:65:
2f:ad:2b:0c:82:07:5a:a7:3a:c5:39:15:82:40:8e:
d7:b9:05:97:f4:9b:4b:03:07:0c:f5:27:3e:9d:4e:
f5:99:ac:d2:69:4d:e9:f4:b4:b7:27:50:9f:b8:55:
8c:8a:8a:5c:89:62:88:f3:fb:e8:e5:6e:be:72:7f:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:96:8C:0F:D9:90:4B:90:0A:3F:36:4E:E0:18:3B:0A:58:17:43
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:75:77:17:96:b9:80:48:52:cb:f2:1c:81:53:df:76:b2:f6:
09:8b:d5:3c:f1:15:2d:42:4c:a6:75:fb:46:87:c2:08:02:49:
83:8b:58:ff:35:53:89:48:46:c5:13:00:93:0e:c1:06:ec:e2:
90:7d:26:1c:7e:81:64:8f:6e:2a:e2:bc:46:c9:7a:6c:d2:b2:
96:01:98:f9:97:e5:41:0d:6f:53:f6:b2:d2:88:a7:ec:03:8e:
8e:da:07:e9:28:a9:12:32:4b:03:4d:c5:ec:9b:88:93:fd:21:
9b:c1:46:83:5c:3a:bc:0f:1f:68:ff:ca:12:fa:b5:9f:a3:11:
18:85:c2:78:73:5d:85:0f:43:9e:7b:d1:38:85:da:7a:ed:9f:
cf:a9:af:b0:57:79:17:76:d3:ef:db:7d:0c:96:fe:ae:57:b7:
f8:f9:62:f3:6a:75:31:49:e8:b9:67:68:25:fb:e3:83:91:d8:
ef:0c:07:20:20:ff:35:25:c1:a0:f2:f8:34:9b:5e:54:c4:d6:
cd:b9:f0:35:55:b2:49:4f:75:3d:01:97:23:05:ff:49:c5:b0:
99:5e:33:d8:55:01:cb:59:6d:d2:05:ee:be:22:3d:4a:cf:58:
e2:e3:5c:72:52:f5:c5:57:39:dc:ab:bf:43:ba:f8:9d:db:05:
55:a0:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:51 2025 by rpki-client