Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: 76Ldd74xdtU8WM2GNNdO1x+4fH5f9R4PjkM8ywJVGV0=
Subject key identifier: 6F:9F:F7:2A:AC:76:D1:5D:6E:67:88:59:72:9D:38:05:C8:BE:8C:F5
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019739F4C0DC1B842E8DA194C5243507CBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 041B
Signing time: Wed 04 Jun 2025 08:00:30 +0000
Manifest this update: Wed 04 Jun 2025 08:00:30 +0000
Manifest next update: Thu 05 Jun 2025 08:00:30 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: kxNVNbcQrzKnYOr/2csCOs1Bu59+H7uNktHUrTn49Fo=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f4:c0:dc:1b:84:2e:8d:a1:94:c5:24:35:07:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jun 4 08:00:30 2025 GMT
Not After : Jun 5 08:00:30 2025 GMT
Subject: CN=6f9ff72aac76d15d6e678859729d3805c8be8cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:d3:c0:cf:2a:c0:10:28:d8:48:e8:12:c6:
3c:7d:7f:6d:27:c6:ed:65:bf:93:35:5b:72:0d:34:
62:d0:18:41:5a:47:85:43:2c:96:2d:b4:80:55:69:
f4:6b:26:3c:b2:09:5f:d2:36:a9:91:c7:cf:4c:ff:
42:13:bc:7a:cd:31:1a:aa:72:e7:24:d6:bf:87:cf:
a9:3d:d8:be:cc:71:e4:8a:10:0a:1f:57:44:93:cc:
5e:cb:99:f6:97:66:39:f2:3a:ec:5c:95:84:35:dd:
5e:a7:07:11:59:eb:90:32:2d:45:02:a1:0f:33:c8:
f2:0c:1e:5a:77:74:1b:ad:13:92:96:30:8e:cd:e1:
87:e6:d0:76:bf:4a:3e:eb:29:17:0d:1d:8d:3f:1f:
d2:e0:03:2a:96:08:71:2f:1e:33:3f:27:31:2a:8a:
f2:9c:5e:02:34:a2:d7:3e:55:ff:38:d2:3a:0f:10:
7b:9c:79:21:fc:28:a7:9e:1a:4c:ab:22:35:c4:41:
1d:9f:0b:61:74:86:e2:cf:ca:f2:d8:3b:53:a3:19:
5b:d8:ec:9b:9a:24:69:d7:48:05:d6:9c:04:44:cb:
dc:af:13:50:b7:94:f4:57:65:e8:ee:61:39:37:79:
a5:d6:77:68:98:c7:c3:41:db:2d:78:c6:ff:e2:c9:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:F7:2A:AC:76:D1:5D:6E:67:88:59:72:9D:38:05:C8:BE:8C:F5
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:fd:8f:cb:b4:93:10:f1:24:c9:a0:0b:2f:c3:af:63:97:
9d:09:aa:2c:1e:97:93:27:af:90:92:c5:53:3f:af:69:ef:38:
b4:b1:2f:b6:4f:38:06:b4:c5:17:ac:90:1e:ad:4a:b7:87:78:
bc:44:0c:4c:78:0d:46:5c:16:a4:87:4f:17:ec:27:f0:14:9e:
37:b9:13:e0:85:78:e3:fc:d9:57:2c:b8:8a:dd:dc:53:93:7b:
f2:5b:f5:cb:e2:a9:93:52:2f:20:4b:68:cf:1d:26:66:ba:f0:
69:3d:ab:3f:20:ee:29:44:03:3a:63:89:17:aa:00:91:a3:85:
54:ea:0d:92:24:17:98:85:ba:fb:c1:e0:5e:50:e5:68:ed:b4:
89:c3:f3:cd:ed:82:a1:cb:4c:c3:05:fe:dc:dc:1c:ee:a7:59:
61:c7:93:af:07:8a:13:63:8f:8e:49:20:6c:5c:70:b5:09:e9:
92:90:a3:c5:a2:d4:13:26:11:ea:4c:34:8c:e2:c7:06:00:99:
11:38:86:2b:ba:a1:44:78:dd:8b:e2:fe:94:a1:33:fe:a1:ab:
61:9e:95:ef:a2:cb:48:4c:e6:b7:d7:3d:1d:0d:69:00:f2:14:
19:dd:6d:4d:b2:91:76:97:02:cb:0a:52:5b:e6:12:bf:03:68:
9e:7a:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:15:12 2025 by rpki-client