Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier: t4p6BP6YIwrGyFdEhGIg1rpNiCEAx/H24TAnWMQ1TyA=
Subject key identifier: 27:70:A2:C1:71:87:95:3F:97:EC:99:CE:34:75:AB:88:BA:7A:83:11
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 01974742B993CF033305BA8223C23E7CE0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 22:00:44 +0000
Manifest this update: Fri 06 Jun 2025 22:00:44 +0000
Manifest next update: Sat 07 Jun 2025 22:00:44 +0000
Files and hashes: 1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: wiaQJHYE5BvuxRUS037pg92o2HztVCXnIvt4QX19tlg=)
3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b9:93:cf:03:33:05:ba:82:23:c2:3e:7c:e0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Jun 6 22:00:44 2025 GMT
Not After : Jun 7 22:00:44 2025 GMT
Subject: CN=2770a2c17187953f97ec99ce3475ab88ba7a8311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:f4:a2:bf:53:94:16:0e:6b:58:9d:38:64:
63:eb:10:de:3f:99:f4:bf:5e:39:54:50:63:a7:dc:
26:68:90:a3:e7:26:06:86:d0:51:a1:b1:12:1c:d1:
da:d9:1a:c9:58:06:da:13:ca:e0:83:aa:e9:bb:30:
ad:c6:db:37:1d:09:18:4d:4e:24:12:28:67:82:03:
70:35:d0:33:fc:2a:c3:e6:0e:dc:1a:19:0f:49:67:
54:75:4c:2c:2a:2e:0a:62:65:57:7b:64:b0:4b:60:
d5:c9:9a:96:a3:69:09:50:97:b6:42:32:af:02:7f:
32:06:00:f3:94:d7:60:45:50:16:0f:3e:5f:6e:06:
6e:1e:e2:31:09:15:7e:68:aa:8a:46:7c:3d:8d:5b:
06:9a:66:97:03:f0:5f:ad:7d:21:eb:89:f4:72:08:
d5:2c:c7:4f:bc:f6:89:3e:c5:c3:76:09:96:4b:3a:
82:ab:a1:46:cf:1c:ab:18:04:c6:af:35:95:cb:4f:
3c:b3:d3:bd:cc:5e:14:b1:c3:57:e3:39:69:90:de:
a9:e2:11:0c:97:15:85:56:3f:3a:65:cd:82:13:6e:
22:bf:e2:92:0c:d8:23:9c:7c:89:7b:5d:40:f4:34:
0d:cb:90:7d:2e:69:43:81:97:34:1a:51:ea:44:fa:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:A2:C1:71:87:95:3F:97:EC:99:CE:34:75:AB:88:BA:7A:83:11
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:9b:f9:c2:15:4a:b2:1b:e7:11:2f:01:49:4c:c0:55:1d:
23:9b:56:78:2d:3e:cf:2a:9f:ba:b9:a6:5b:d9:ab:b6:66:9b:
ed:e7:d1:ac:82:f8:c7:07:e8:5a:2e:ee:7d:35:e9:e1:6b:6a:
0d:1b:48:2e:cb:e1:31:96:2d:ee:1d:85:38:a2:55:33:f6:ec:
70:64:f9:10:ef:df:c1:d0:58:21:62:23:21:a2:b7:07:a1:a5:
0f:8b:aa:24:11:2f:fa:42:8b:68:d6:17:40:90:16:4f:90:d7:
cf:61:7f:e6:ba:32:29:02:15:72:9e:6a:c2:2c:e3:9b:3f:eb:
90:17:87:93:89:8b:99:38:f3:c0:da:84:90:e8:de:70:ae:68:
61:cb:81:48:6e:4b:53:7a:6c:e4:a1:3a:ec:5a:61:43:11:31:
f4:81:52:5d:09:d8:20:c2:65:91:ad:5c:7b:12:33:24:ee:52:
66:2f:e1:98:71:42:53:0f:16:7d:ab:b5:58:01:1d:29:36:db:
6e:33:29:0f:00:dc:7b:7c:46:5e:52:8c:50:b6:21:08:51:31:
d0:c3:3e:fe:9d:6b:0a:06:75:a7:55:c8:99:61:4c:fd:10:51:
f4:46:7c:94:5b:5b:08:92:57:72:22:de:b0:2a:36:54:d6:06:
86:f1:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:18 2025 by rpki-client