Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: rV5qh6cZIoZ+Pazmw9zGGn/3DSCyJXO9B2/fHmTAFo4=
Subject key identifier: 8F:40:9C:2C:A2:37:64:1D:7E:7F:58:E8:83:CA:D3:3C:29:68:CE:7D
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01974B8D4F7B9D5F190837E12A5EB4049A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0898
Signing time: Sat 07 Jun 2025 18:00:41 +0000
Manifest this update: Sat 07 Jun 2025 18:00:41 +0000
Manifest next update: Sun 08 Jun 2025 18:00:41 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: da1wuDiWyNeMmC2Yf+TvtjOgdws/7xcoYdr8MP+IdR8=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:4f:7b:9d:5f:19:08:37:e1:2a:5e:b4:04:9a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jun 7 18:00:41 2025 GMT
Not After : Jun 8 18:00:41 2025 GMT
Subject: CN=8f409c2ca237641d7e7f58e883cad33c2968ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:62:ef:c0:35:ba:0d:45:e2:33:58:8a:b9:
de:8b:9e:e4:67:dc:be:37:8c:9b:4d:c5:15:a3:b7:
5c:c8:72:00:65:b5:53:f4:e8:bb:d5:9c:19:da:22:
93:82:6f:ef:2a:93:8e:a7:8e:84:6a:0a:da:44:c3:
23:27:7a:e8:41:60:84:39:0f:71:9b:25:e7:49:92:
25:3b:0e:86:ae:dd:4f:f9:7b:83:3e:24:17:25:ea:
58:d9:02:b1:f4:04:7e:a2:55:4a:f2:8e:83:53:37:
04:63:42:5d:dc:46:42:4a:33:b5:43:3e:10:31:9f:
e0:3c:c3:db:0c:9c:88:67:ea:f6:fb:04:48:3f:22:
88:55:fb:b6:04:d2:f4:b2:d3:83:4e:a6:76:c0:c6:
b5:24:57:12:11:be:45:83:f2:3d:98:6c:7b:72:c6:
49:e3:78:0a:95:5b:32:d0:2c:a1:88:d6:63:f5:de:
94:bf:bd:76:73:ff:e2:00:aa:b2:87:5c:22:c0:c6:
c8:71:0a:90:8d:e6:67:f8:39:82:de:d8:dd:98:68:
d8:e1:9f:1c:80:9f:fe:f5:fa:b5:ef:c7:53:31:98:
a3:dd:b8:f1:a6:02:4b:c3:60:3b:50:2f:1e:8f:80:
b1:b9:19:ff:75:d9:59:ad:36:9c:c6:6c:58:64:39:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:9C:2C:A2:37:64:1D:7E:7F:58:E8:83:CA:D3:3C:29:68:CE:7D
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:89:53:85:0e:c4:ba:a4:47:93:43:12:e1:2e:05:8b:c9:
74:09:d4:79:2d:f1:8e:9d:35:e8:12:29:71:05:9b:56:fa:09:
37:bf:e2:a9:31:55:d8:c3:00:de:8b:08:33:13:cf:e2:d3:a3:
c5:eb:f1:fa:c6:92:3e:52:13:b0:13:ac:31:cb:de:b1:fe:27:
ba:fc:f8:27:53:c1:7b:ac:3c:cb:2b:37:1c:d9:55:e3:10:00:
a9:d8:eb:08:a9:f1:eb:39:a1:ae:2e:84:3d:10:39:07:42:ee:
95:d6:06:e0:4d:fd:08:81:11:af:e4:08:cb:e0:5c:d0:75:90:
66:b2:94:23:23:74:c1:83:be:b3:a2:df:64:50:d0:8b:b7:5c:
15:f3:16:a1:02:fd:37:5c:40:9a:ed:99:1b:ad:f6:22:b0:2f:
82:06:95:1e:75:47:75:c0:7b:6a:c8:54:67:61:39:35:ed:9b:
0f:a8:1c:0c:63:32:91:80:a8:12:d4:06:f0:f6:50:a3:8f:4f:
4c:cd:53:50:dd:9b:d7:1d:f0:c6:47:d2:ed:c7:6c:c3:69:26:
9b:1c:a5:14:0a:ed:b9:22:c6:5a:86:85:d4:e4:6e:7d:57:82:
6d:b2:e4:6d:74:cc:62:d9:91:9f:ba:68:dc:8c:25:d6:83:00:
0a:2e:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:44 2025 by rpki-client