Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: Jju7KkN0lcciEzDiZHkN9OPpY0HH9kfROTDDc94ZftI=
Subject key identifier: E5:CA:4A:24:69:2C:C1:F2:D0:14:A1:D5:24:87:76:BB:DF:52:D0:EE
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01974B1F639D5D80813AB7F03CC51D6F228E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 16:00:37 +0000
Manifest this update: Sat 07 Jun 2025 16:00:37 +0000
Manifest next update: Sun 08 Jun 2025 16:00:37 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: 6XtWM5zQJNqeIbIPp/Og3/quNEPOzlnf4oR0td08CgY=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:63:9d:5d:80:81:3a:b7:f0:3c:c5:1d:6f:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Jun 7 16:00:37 2025 GMT
Not After : Jun 8 16:00:37 2025 GMT
Subject: CN=e5ca4a24692cc1f2d014a1d5248776bbdf52d0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:ff:6a:a5:c6:67:8e:56:40:0b:08:7b:d0:
fb:33:57:0a:ed:b1:e9:92:89:4b:46:a8:3d:50:5a:
ad:1c:79:fb:c8:ae:62:5b:ef:d5:a9:c7:cf:a6:74:
a3:8c:7f:55:16:14:42:7d:0a:00:03:2e:af:84:6c:
13:2a:06:5b:46:44:c2:e8:2a:f6:39:52:ba:70:6e:
9e:fe:4b:e0:4e:16:25:69:50:78:cb:a8:62:57:e9:
0c:4f:6c:fb:f9:4d:39:90:5d:aa:3c:bd:b0:07:a4:
b3:04:d9:68:36:7b:17:06:74:e5:33:e6:89:bb:e4:
53:ec:5b:31:b1:eb:b9:69:6d:cd:38:38:91:e9:96:
3e:34:33:02:af:72:c7:3b:d5:82:a1:9b:ee:1f:22:
48:29:fd:f0:e9:38:39:af:82:05:13:6b:8e:5f:d8:
7b:fd:23:ac:f9:25:d5:c4:8f:d7:40:34:c4:f2:0c:
c2:4f:33:13:b7:51:dd:09:a0:17:bf:b3:61:53:5e:
49:bc:57:cb:42:1a:b7:b6:bc:75:f3:0e:82:12:70:
99:b1:15:a4:ec:fb:8a:cb:5c:c4:1c:5a:0c:4e:13:
bd:fa:3c:ed:de:a0:ac:a9:7c:de:ab:f5:f3:0c:65:
f7:5d:82:10:2b:55:f9:e7:fa:c6:2a:5d:eb:a0:46:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:4A:24:69:2C:C1:F2:D0:14:A1:D5:24:87:76:BB:DF:52:D0:EE
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:0e:fd:86:7f:a9:d6:66:59:72:b1:e8:2f:cd:b6:df:5e:
a4:9c:bf:bc:67:fb:5c:04:06:a3:8d:5d:f8:8d:54:93:d8:e7:
d7:86:64:1d:32:48:9b:a9:5d:57:a9:24:14:85:87:a8:2c:7d:
53:21:53:bc:fe:7d:33:7b:8e:40:13:ae:ff:19:27:5e:e3:ce:
59:fe:f2:be:a4:82:a5:a8:19:f2:67:29:f6:18:48:3c:e1:92:
2f:99:52:5e:ef:ef:60:7c:12:fd:aa:96:36:66:c0:6c:0f:18:
74:97:28:d4:d7:08:2c:17:f8:0d:c3:09:04:3c:e3:24:24:1f:
95:82:5a:4d:79:6e:01:a2:bb:84:ef:77:cd:38:c2:cf:1a:4b:
1a:e5:42:08:17:4f:13:fe:f8:53:39:9f:c3:b1:b4:b4:96:4a:
50:0e:3a:99:ed:64:fa:03:cd:94:ff:43:bd:5c:29:30:db:bb:
dc:a5:21:67:05:4a:33:a5:7b:86:14:d0:5a:ab:fe:d7:59:87:
fd:08:2e:c4:86:e1:2e:ff:98:03:fa:6e:cc:f1:82:4b:17:ed:
23:21:ca:a7:69:08:30:08:2a:d4:f2:72:17:21:0b:07:f1:0b:
11:cf:55:03:a1:a6:57:f1:80:f7:83:ea:45:9c:22:d8:67:57:
d5:62:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:22:59 2025 by rpki-client