Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: Agcfhhy+vPYRB4ktZZdnwe0EpKR/UDC/j0hx680bdOs=
Subject key identifier: C8:FD:AB:B5:48:14:DB:9C:CF:1C:03:B4:1D:51:7F:C5:FD:18:F9:61
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 01974BFB1731D2DC8EBDBFCB42D35A575D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:00:36 +0000
Manifest this update: Sat 07 Jun 2025 20:00:36 +0000
Manifest next update: Sun 08 Jun 2025 20:00:36 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: tgRw5Lh4KnNdSwYgjPRF4OwzJpTNH0huRYlQ7s5RMWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:17:31:d2:dc:8e:bd:bf:cb:42:d3:5a:57:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Jun 7 20:00:36 2025 GMT
Not After : Jun 8 20:00:36 2025 GMT
Subject: CN=c8fdabb54814db9ccf1c03b41d517fc5fd18f961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:85:77:a1:85:14:11:d4:3b:9d:9e:4c:98:
d8:7c:ac:d8:dd:2d:cd:9a:c4:15:1d:b9:33:44:f0:
8f:04:3e:7d:66:88:a1:01:37:1f:3e:64:6f:b8:96:
27:c9:da:07:2e:af:9e:12:24:4c:60:96:39:ad:21:
39:4d:02:7d:71:92:52:df:81:c4:9f:be:5c:e0:fb:
3f:ab:2f:89:8c:d0:66:fb:73:09:8c:66:64:3b:db:
9d:01:21:18:88:66:30:b3:12:9b:88:59:45:49:c8:
2e:0f:25:1f:0a:b1:0a:71:e5:20:9b:ae:94:15:4d:
62:7b:d3:45:81:3d:81:67:8c:83:ae:f7:8e:e2:fe:
83:86:2c:fc:39:89:e5:c1:77:0d:1b:21:f6:de:35:
51:ab:63:67:80:ed:13:58:59:27:a1:29:c1:99:8a:
c8:b5:14:3b:b1:1f:11:7c:a4:0b:77:16:0d:dd:64:
e4:17:0b:c8:15:8f:07:6a:d8:52:da:25:00:5a:59:
05:2a:37:3a:66:64:79:ac:3f:8b:1f:d8:c3:b7:a9:
b5:5b:dd:91:bf:09:8a:c6:60:58:0f:ca:f7:0a:70:
8f:e2:b2:ad:de:36:0e:86:b2:83:55:e2:c0:f3:89:
a7:7b:e7:58:1b:3c:17:48:e1:d0:35:fc:b6:d6:69:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:AB:B5:48:14:DB:9C:CF:1C:03:B4:1D:51:7F:C5:FD:18:F9:61
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0a:c9:c1:5c:c2:cd:c6:45:df:ab:de:a2:f3:92:01:78:ef:
87:6d:a6:90:c4:83:e5:01:5f:81:f5:27:af:dd:9e:70:ff:23:
ce:fc:95:ca:8b:8b:da:ed:fa:82:4e:88:70:f4:11:2c:ae:07:
f0:41:80:d8:cc:1c:41:d0:2f:e1:26:7b:e3:9d:60:e6:71:dd:
8a:46:43:52:be:4a:55:df:35:d4:b0:67:97:9a:77:bf:f5:49:
ff:48:67:71:c4:4a:33:5e:8f:a0:77:7f:f1:54:5d:d1:44:a8:
58:f2:1e:92:cf:b6:c4:be:c1:79:2c:d7:c0:aa:d0:b7:e5:9d:
8b:b4:c0:24:e3:4c:b3:16:3b:a8:c3:f3:88:5f:87:49:8d:7b:
60:8d:06:7a:1a:e9:89:6e:c4:72:09:e7:cf:15:ca:96:fa:40:
54:3b:a7:e7:1e:3a:89:c9:bf:48:a4:e7:03:dc:63:12:f3:39:
b2:9b:d7:a0:a7:88:c8:58:63:65:60:02:31:4a:a7:08:77:1f:
99:b6:92:4a:ff:17:96:dd:7a:b9:18:c2:89:88:5d:47:89:9a:
8f:24:d1:e6:1a:97:35:72:8f:2f:fa:da:28:8a:17:f8:bb:a6:
97:75:16:2e:d5:7d:77:b4:9c:6b:8b:e3:fd:7c:8e:02:d1:27:
b3:1b:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:24 2025 by rpki-client