Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: A9bjew/UMrFcTXC0xTRuphicf/iACMUzNkFDB4fE9zk=
Subject key identifier: 7B:D5:16:70:27:13:9B:38:59:78:55:31:55:1A:EE:0A:29:72:86:73
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01974BC473EFB3EF6636A0BA1E92FBEDA2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 0165
Signing time: Sat 07 Jun 2025 19:00:55 +0000
Manifest this update: Sat 07 Jun 2025 19:00:55 +0000
Manifest next update: Sun 08 Jun 2025 19:00:55 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: dzMjnPQP+JvbOvRau7OyJRcHP0LqFKfwWxaQZtSgTLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:73:ef:b3:ef:66:36:a0:ba:1e:92:fb:ed:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Jun 7 19:00:55 2025 GMT
Not After : Jun 8 19:00:55 2025 GMT
Subject: CN=7bd5167027139b3859785531551aee0a29728673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:de:0c:61:39:b3:3c:8f:c3:3e:c5:bf:e2:
1e:45:92:83:89:2a:72:d3:aa:21:45:f3:ef:0e:5f:
01:6f:48:7d:6d:b0:48:db:6f:ee:6c:32:30:13:bd:
ff:78:81:7a:99:dd:47:a0:c4:1a:84:62:cf:9a:91:
b7:f9:ac:13:1b:08:46:7a:0e:a2:34:1a:43:3a:02:
63:b2:70:69:88:79:59:50:e8:23:d7:2a:a6:7f:df:
f7:29:0a:2a:55:eb:63:a3:1f:9a:ca:f0:8a:bf:e7:
9c:95:89:75:1a:0f:ae:11:a6:5c:c6:c3:3b:f4:39:
64:a1:42:5f:13:49:3c:b0:f4:29:e1:a2:0c:f0:05:
13:30:40:9a:64:7a:83:8a:fd:05:84:c1:c6:11:e1:
5c:7c:51:24:9b:ad:68:2e:9a:cf:53:04:97:8d:24:
9e:ff:44:03:76:85:9d:db:8e:58:49:23:d8:21:43:
28:48:bd:d6:af:6b:61:33:de:4d:0b:f4:3c:89:d4:
d3:f3:73:2e:81:0c:c6:55:61:78:ee:2f:58:e9:ec:
23:07:43:32:4c:a1:76:62:bf:0d:03:ea:7f:3a:c3:
cf:f7:77:19:ff:c0:86:ad:97:c1:19:26:9b:ba:4d:
ab:fb:dd:d1:76:db:71:9e:85:11:3c:26:b2:20:4f:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:16:70:27:13:9B:38:59:78:55:31:55:1A:EE:0A:29:72:86:73
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:62:be:f2:5b:06:35:9b:12:1b:59:d1:c9:98:08:34:15:
f3:75:c3:ac:e9:38:1f:04:f2:bf:23:bd:66:b6:39:15:5a:c4:
2a:dc:40:ce:74:02:8e:07:8e:29:c9:75:01:bb:2d:d4:2d:6e:
ea:d1:2b:64:bd:3a:d9:18:6c:56:4e:25:5f:26:8e:36:51:c1:
96:e1:52:c6:e7:e7:01:2e:af:39:13:47:27:d3:75:d6:fe:dd:
47:a8:83:c2:c7:02:dc:74:1e:32:d5:ca:d4:16:1b:fa:22:17:
96:54:a5:ad:b0:7e:72:c9:e3:cf:c9:e7:af:c9:05:2b:9d:7a:
4f:85:a8:34:c7:7a:b5:62:4b:92:9e:6f:73:5e:03:a7:ec:e2:
cf:ce:31:5e:75:a6:d0:a7:f4:00:28:1f:d1:86:3e:f9:d4:c1:
f6:aa:fc:6b:ea:3f:6f:ad:f7:03:e3:e7:c7:41:ce:6f:a5:90:
23:93:b4:85:2f:06:43:be:c2:9c:69:4b:b5:b2:50:e2:ad:d3:
57:28:ae:20:55:a6:8c:c7:28:97:44:98:ac:71:34:b2:3f:45:
15:35:b8:62:3f:b4:73:ef:88:22:0b:33:8c:41:eb:5c:e2:ca:
7d:a0:41:f4:86:df:e4:ef:26:23:4b:5c:d6:ac:71:35:3c:ad:
ab:83:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:57 2025 by rpki-client