Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: pH5hWWsnLBog+dVTB3XFvl1xiYj2dH0ZuA6s951JYGw=
Subject key identifier: 8B:72:AF:FE:9D:D5:E4:A1:5A:3D:C5:87:14:0E:F6:A0:49:66:56:2D
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019749D5D8CD1C6777C6A93723F105DFC7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 1033
Signing time: Sat 07 Jun 2025 10:00:40 +0000
Manifest this update: Sat 07 Jun 2025 10:00:40 +0000
Manifest next update: Sun 08 Jun 2025 10:00:40 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: ZtyNMp68Wm6KIMOTQjpgyVxnSOra8h38cUzqmf1vsDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d8:cd:1c:67:77:c6:a9:37:23:f1:05:df:c7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Jun 7 10:00:40 2025 GMT
Not After : Jun 8 10:00:40 2025 GMT
Subject: CN=8b72affe9dd5e4a15a3dc587140ef6a04966562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:2b:ce:c1:f8:63:21:19:dd:ab:b0:d3:39:
37:ae:7d:2e:89:3f:e9:82:7e:d9:f0:3f:a9:91:50:
88:7e:70:a9:bb:f3:35:79:9a:d6:6f:0d:be:cc:35:
fb:e7:5b:ac:05:f9:28:cd:98:33:aa:ec:79:10:13:
3c:ce:86:c2:de:7d:a0:08:08:c5:85:38:59:2f:f9:
53:37:3a:df:13:62:fa:16:a8:d0:3c:fd:73:d6:bc:
90:27:31:ce:79:eb:a8:b5:28:f6:2a:d7:13:11:d1:
31:f3:aa:10:83:3b:50:7c:b6:50:1b:4e:82:f1:6f:
08:63:e3:c6:d2:ec:7a:d9:ad:88:d2:60:dc:1e:7d:
c4:c4:38:ff:92:1f:e6:a4:3b:b6:0e:c3:70:ec:ca:
e8:bb:d2:8c:7b:ef:e9:80:2e:8f:d1:27:64:c6:1f:
36:b8:26:83:e5:89:87:1e:1a:e1:1a:9a:64:fc:00:
15:a6:84:7a:75:af:bb:df:0a:c8:7b:cb:bd:f3:92:
d2:f0:b9:60:8d:ee:58:fa:67:63:28:f7:0c:c2:57:
2b:e7:2a:cc:47:44:a8:0d:49:78:1e:e7:d4:38:11:
47:56:ce:ab:46:52:2c:22:2d:00:9b:25:df:40:c1:
c3:7e:4f:2d:76:6b:a3:55:67:d0:e7:0c:47:c8:f4:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:AF:FE:9D:D5:E4:A1:5A:3D:C5:87:14:0E:F6:A0:49:66:56:2D
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:24:84:ed:8d:11:7e:2c:f4:16:25:2d:7f:16:2f:b9:4a:67:
46:3e:b4:aa:1d:f2:24:a1:79:7d:7e:02:b6:0f:70:3c:b1:2c:
9d:fb:66:0d:e7:36:d9:bd:59:8a:2d:3b:0d:e2:c7:cf:f1:b4:
92:ba:84:5b:8c:d9:08:cb:d9:bc:64:a4:e6:c2:77:d6:60:f9:
e7:41:03:fe:e4:53:c8:d8:b5:a5:ed:a1:dc:b2:f4:51:6e:f1:
35:4f:cb:1d:f7:b1:9c:f8:20:3e:f7:49:af:12:90:d6:1b:4d:
51:fc:a1:d2:9f:b0:e7:3f:2e:a1:bb:b5:32:91:f9:15:77:71:
05:eb:b4:29:2e:c7:77:1b:88:c5:a4:a0:69:e3:54:77:47:f6:
a7:27:15:e5:eb:02:72:f1:7d:e8:83:97:81:2b:44:09:f3:e9:
43:66:9d:73:78:8a:c4:17:bc:b4:8b:bf:68:b9:d9:16:22:82:
dc:0a:d4:6e:ec:f5:1d:d0:b1:a4:af:23:a6:47:f7:4a:e4:70:
b9:d2:cc:89:2e:3a:4e:95:23:9e:12:5b:f1:55:27:45:36:12:
0d:85:f9:fc:12:f2:f4:2f:da:52:dc:78:1f:e1:f0:aa:c9:c7:
45:dd:6f:5d:bb:c7:71:60:a7:fb:5a:dd:48:22:8c:2b:af:17:
ea:0e:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:43:23 2025 by rpki-client