Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: k40KHn26zQ61ivoSU1fOqkGm9Wm5Q+xFmS3dkBSNx3Q=
Subject key identifier: D9:1C:70:62:82:9E:E9:81:F9:6A:58:42:3C:3E:4D:60:64:80:95:79
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019747E7539257D4783B99806DCBD9B7A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 01:00:31 +0000
Manifest this update: Sat 07 Jun 2025 01:00:31 +0000
Manifest next update: Sun 08 Jun 2025 01:00:31 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: 7g37qiAfdPZD+r4PZsB4Eq+Zu92iXmYidzbaEOw/+zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:53:92:57:d4:78:3b:99:80:6d:cb:d9:b7:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jun 7 01:00:31 2025 GMT
Not After : Jun 8 01:00:31 2025 GMT
Subject: CN=d91c7062829ee981f96a58423c3e4d6064809579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:78:71:dd:63:b2:af:e6:a4:2c:da:8d:c1:
20:04:d3:71:e1:52:b5:45:71:51:69:38:f5:22:63:
fb:75:0a:7a:9e:88:bf:64:62:9e:4e:f5:67:c8:ef:
bc:c4:1e:e6:d2:ea:4c:23:4e:00:e9:4a:25:d2:e9:
a6:62:07:ac:8a:38:91:0e:a4:4a:f6:51:5a:1c:1f:
0b:fe:38:eb:5a:e4:e3:0d:c8:37:16:79:4e:9f:43:
44:78:f7:c3:9e:d9:7f:a5:78:db:81:c5:ad:07:01:
a7:82:28:d6:55:fc:a6:db:4c:c3:2a:8a:8a:b9:d5:
e8:21:7d:f8:01:03:dd:cb:fb:5a:de:f1:02:78:62:
b0:b2:b6:9c:93:8e:53:e9:cf:cf:b0:24:7b:ba:40:
3a:d3:9a:be:1a:b8:50:cc:90:8b:c4:38:07:d4:7e:
f4:c2:ae:6a:5d:a9:dd:5d:22:c5:2b:cf:d9:70:d6:
26:00:39:9d:0d:95:47:ba:04:c0:2a:f5:4f:1c:c2:
a0:c7:40:00:18:68:91:33:a8:9e:8f:2e:71:71:dd:
e5:28:81:78:71:e1:a8:22:bc:e6:f3:47:00:d8:02:
ff:1c:7a:fd:6f:37:d3:8f:37:ef:c0:08:97:62:01:
d9:d3:75:fc:cf:eb:1e:f5:b0:22:b1:b7:74:c7:3a:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:70:62:82:9E:E9:81:F9:6A:58:42:3C:3E:4D:60:64:80:95:79
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9f:b8:ce:39:67:74:25:c1:83:52:2e:c0:7a:35:5a:05:12:
42:c8:d4:86:3d:07:34:13:c9:72:32:64:e9:23:a9:be:74:d8:
ed:ff:9b:5a:2b:87:d5:27:07:43:c7:75:5b:cb:d0:cc:8c:e0:
89:da:3b:4b:21:07:b7:f4:7a:dc:a7:2e:d8:1a:21:bd:a2:dd:
37:a2:5d:77:75:bb:50:cd:1f:db:ab:5d:e2:18:14:78:fe:a4:
c3:f1:8b:18:ed:f9:c2:b9:44:92:15:cf:8b:90:cd:f5:7e:ce:
14:68:b9:f2:7a:17:21:24:6b:95:16:07:54:18:db:ba:57:9c:
94:7a:48:fc:98:db:70:89:b0:02:13:22:ae:e3:3e:a2:99:df:
f0:b0:ab:f8:c7:fb:1e:d6:21:9e:c6:7e:24:6f:4e:2c:17:64:
de:4f:18:40:df:5a:8d:47:17:f9:71:68:59:8f:60:a2:5b:50:
95:dc:d8:b9:50:a0:48:8a:91:b4:2e:79:e7:dd:9f:84:26:4f:
3c:a4:3e:8f:1a:3c:8a:11:49:64:1c:ae:2f:9d:06:66:9b:5a:
e7:df:c7:6b:b6:3a:a0:28:88:43:4e:25:bb:a4:bd:d9:4c:46:
61:22:c4:c5:6e:39:cd:21:f6:82:e3:0e:62:52:40:1d:77:1f:
e0:3c:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:21 2025 by rpki-client