Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: a66BojRSzBwiFDVZLcYZoBKLP2SPIPpqsB83sW9nQmA=
Subject key identifier: A1:70:68:ED:10:29:0F:AB:5C:E4:50:CF:DC:71:01:9F:70:41:05:83
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 01974E8E99B46B17C6C502F371DFB9610728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 032F
Signing time: Sun 08 Jun 2025 08:00:57 +0000
Manifest this update: Sun 08 Jun 2025 08:00:57 +0000
Manifest next update: Mon 09 Jun 2025 08:00:57 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: sXYlN+6oKFLH8w4m4OFlj1/WXKdAKv8ZFkgtVrTMJcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:99:b4:6b:17:c6:c5:02:f3:71:df:b9:61:07:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Jun 8 08:00:57 2025 GMT
Not After : Jun 9 08:00:57 2025 GMT
Subject: CN=a17068ed10290fab5ce450cfdc71019f70410583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:2b:43:76:1e:3d:42:e3:ae:52:bf:68:d6:
00:02:b3:80:71:03:49:85:3d:2e:87:57:97:53:62:
2a:a6:57:39:0b:6b:10:ec:27:ee:ce:a4:39:65:22:
11:57:d5:b1:e7:20:f4:21:58:a3:1a:6d:7b:9d:ec:
68:12:b2:73:cb:6c:3d:05:16:4a:ed:98:11:7b:9d:
4a:6c:be:4b:85:3e:0d:46:fe:5f:fc:0d:64:1f:33:
45:c8:14:49:cf:49:0b:ec:ba:f0:22:94:a1:da:12:
8f:03:39:42:c2:a6:ac:5f:6c:68:a3:75:b2:7a:72:
8c:37:4b:41:6d:b4:1d:f5:58:9b:17:7b:a9:17:aa:
dc:5f:29:fd:a9:27:a0:bf:0b:ed:b6:41:44:1e:62:
c9:ef:6f:a4:c6:aa:bd:c5:7f:b4:68:fa:5b:8d:9b:
4b:83:12:ad:59:66:08:a1:1e:a5:77:10:b6:4d:ff:
6e:dc:eb:2b:1d:d8:b1:13:af:29:2b:dc:09:7d:51:
21:f5:15:d7:32:aa:2d:bc:0e:ef:0d:e2:a7:4b:93:
53:ca:7b:61:f3:23:35:2c:91:fa:aa:71:d9:ab:0b:
f3:f3:14:be:37:cb:bb:66:45:4e:8f:4f:a1:87:b3:
47:e4:8e:a5:e2:3d:f8:39:ef:23:68:ba:7c:18:6d:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:70:68:ED:10:29:0F:AB:5C:E4:50:CF:DC:71:01:9F:70:41:05:83
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d7:30:2e:ae:42:1a:0f:d9:f3:2c:7a:70:e1:87:77:7d:5a:
ed:8a:06:fa:67:25:d8:56:fe:bc:7c:57:f2:03:50:9a:33:72:
c0:b3:b9:85:35:c0:42:a2:6f:ac:dc:87:76:b4:61:db:86:b2:
b7:c8:a5:ad:b2:f5:ba:c6:68:e6:72:d0:e3:66:b9:5d:40:2f:
ba:76:14:ea:cd:72:27:2f:4b:66:0e:1d:46:4f:d4:b5:01:36:
08:eb:3e:80:1a:32:1c:c2:46:1b:df:ad:ae:e6:09:c4:b7:86:
c6:c9:9c:f0:23:c9:77:75:a4:db:63:83:3f:0e:c7:d3:bd:bc:
af:a4:a9:20:06:6f:ba:a8:ba:b6:10:07:be:43:5a:2f:80:a3:
5f:ca:f9:e3:e9:09:e9:91:54:7c:08:98:79:46:f4:a7:46:e4:
2b:06:25:ba:7b:25:ad:39:c1:d1:22:5c:94:87:37:03:79:f0:
33:a0:bd:88:7f:bb:87:fc:8b:55:88:32:1f:7e:bc:97:a4:9f:
b4:df:e6:2c:66:3c:be:b3:52:8b:04:05:69:db:30:a1:dd:8f:
a9:f4:d3:7f:aa:3e:fa:86:aa:af:64:cb:96:05:ef:0b:e9:9c:
99:47:8f:43:9a:67:1a:62:23:ab:b2:44:b4:60:1d:57:57:c0:
d7:9c:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:38 2025 by rpki-client