Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: CJvUZvz7T+3fSmeUameQkaDI4pkbN/j8ie1FLDsrzoc=
Subject key identifier: 8F:E3:64:AD:E1:A1:14:1A:FE:A9:38:2F:92:71:81:FF:F9:C9:1B:FC
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 01974A436B076A5B3DB5311AE5BA2DD5FE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 12:00:21 +0000
Manifest this update: Sat 07 Jun 2025 12:00:21 +0000
Manifest next update: Sun 08 Jun 2025 12:00:21 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: RBULh88t1nPNti3SRrWulb/4f+4RgKGIL1niZc7oNNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6b:07:6a:5b:3d:b5:31:1a:e5:ba:2d:d5:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jun 7 12:00:21 2025 GMT
Not After : Jun 8 12:00:21 2025 GMT
Subject: CN=8fe364ade1a1141afea9382f927181fff9c91bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:44:30:1f:f2:c7:13:d1:3e:e1:ff:b8:60:
16:fa:67:77:33:e4:8e:f7:c1:3b:41:fa:ab:79:1e:
b2:55:96:08:a9:78:ef:a0:6c:4a:39:8a:2b:ca:d6:
07:9b:4e:fc:c8:27:84:f6:2d:35:36:24:46:7f:b9:
f0:8b:77:58:2f:2b:c0:a8:a5:5c:80:68:80:0b:7b:
2a:2e:be:86:35:bb:f3:23:e2:0e:d0:9c:b8:4f:26:
78:c2:a2:fb:aa:bb:84:84:5e:81:68:65:4b:bd:63:
e5:47:98:0c:91:90:42:01:af:cb:a9:f8:9b:87:f1:
87:82:92:0e:c2:42:d8:22:6f:90:fa:54:a6:d7:5b:
1c:2a:bb:6c:cc:b6:39:bd:19:4f:0f:c8:e7:6c:21:
d9:c7:27:a5:4f:81:a4:52:a7:65:6d:82:77:8f:24:
0b:43:92:f3:f0:43:f4:65:c4:df:65:99:a0:d9:d6:
e7:6c:ce:94:98:99:37:c3:b6:04:92:a9:f0:71:95:
62:f7:6c:90:e5:a6:39:9a:dd:c8:e9:a7:9a:02:9e:
81:d8:ed:a5:ae:7e:a6:78:73:80:17:5d:e9:b7:4f:
3c:8c:ec:2b:66:bf:1a:fc:f5:69:2b:1a:55:e5:b2:
4e:8e:ea:90:31:4d:07:90:25:e2:e4:6c:32:fe:dd:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:64:AD:E1:A1:14:1A:FE:A9:38:2F:92:71:81:FF:F9:C9:1B:FC
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:53:58:72:e9:3d:14:16:22:78:f6:49:c0:61:4e:c2:a5:
81:21:62:15:34:94:c5:c8:28:eb:c6:ac:97:d7:23:ad:8a:dd:
ed:ab:db:46:63:5e:24:96:7c:0d:3f:cd:42:ee:e9:6d:0b:2e:
d3:5c:16:5a:5d:b4:3e:10:32:02:35:bc:06:43:91:01:79:9a:
47:2e:cd:ea:68:8c:34:89:71:3e:61:6a:98:81:15:5c:48:3c:
d1:8a:e7:33:9c:09:b3:46:84:95:1c:e2:f5:3f:ec:db:0f:c5:
53:71:a9:2c:7d:00:85:28:92:34:8d:b5:ff:b2:13:7a:14:46:
36:3a:68:58:00:06:3a:aa:d1:8f:29:37:d1:64:4c:96:1a:60:
a9:35:d8:bf:6f:1e:97:61:aa:71:a6:55:af:df:6c:75:71:b9:
a7:87:45:4e:c7:8a:c1:41:6b:7a:66:59:7a:c8:77:10:9c:f6:
9f:21:f2:5e:bf:8c:d2:2f:c7:85:10:90:1d:50:d5:03:54:cf:
38:ab:b0:9d:ca:9d:ed:ad:5b:2e:a8:0b:a3:a0:ec:8d:63:ff:
00:93:f4:4b:f4:a4:08:82:b7:f9:19:4b:2c:aa:d4:83:43:14:
2c:5c:92:17:83:55:8d:06:e7:98:2c:33:e6:6d:99:0d:34:95:
5c:75:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:18 2025 by rpki-client