Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: HEJTjQJDdqOjq8L7goUt3MCQ2xl72yJWEzgzjuMBgOE=
Subject key identifier: 9E:22:34:62:61:EB:B2:23:CE:EB:55:22:07:08:6A:70:12:39:EE:C6
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 01974A0C721FF2FF7B4A354AA90F43E792F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 133A
Signing time: Sat 07 Jun 2025 11:00:18 +0000
Manifest this update: Sat 07 Jun 2025 11:00:18 +0000
Manifest next update: Sun 08 Jun 2025 11:00:18 +0000
Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: OJKLSqyX+w7MUICsaeqUxkK7t8EFMp3DxSikCkTizMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:72:1f:f2:ff:7b:4a:35:4a:a9:0f:43:e7:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jun 7 11:00:18 2025 GMT
Not After : Jun 8 11:00:18 2025 GMT
Subject: CN=9e22346261ebb223ceeb552207086a701239eec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:c7:c9:47:89:be:b4:f4:60:a2:6a:33:a5:
b9:28:97:a3:f9:3f:7f:7e:4f:65:40:d8:21:f6:91:
9c:4b:a8:16:7d:ec:c3:69:55:17:53:ab:e9:cf:06:
35:fc:c7:67:23:7b:14:5a:c2:37:6f:19:3c:55:0e:
63:e7:aa:75:e0:2d:d8:e1:6a:d1:e3:92:ba:71:5f:
36:9a:62:c3:d8:5a:4b:79:80:de:86:5f:68:bf:3c:
d6:80:e6:21:05:cc:8b:7a:e1:8b:c9:52:a2:72:31:
a9:42:33:3d:c7:79:42:bd:52:79:2f:b8:08:6e:8d:
9b:cc:3f:2e:e0:f3:e8:13:fe:84:c5:78:f1:3e:e3:
d8:22:34:82:c6:fd:94:1a:cf:69:67:11:aa:db:9a:
9b:74:e3:de:38:8a:fd:76:cc:32:35:1f:5a:72:54:
80:6c:a9:97:2e:e4:23:75:18:87:1e:eb:13:a9:90:
71:06:db:a0:7b:d0:7b:f5:bb:cd:9e:7d:23:8f:a1:
d5:ab:04:75:34:cf:86:0f:b8:f5:a2:68:bd:1d:f8:
fe:b1:c9:7a:ff:2f:6e:88:08:25:77:f0:c6:3a:41:
ea:e2:2f:21:7c:9d:66:90:b4:88:7c:98:ea:70:86:
81:9f:96:d6:5d:26:9d:46:00:e3:f8:a3:11:0e:be:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:34:62:61:EB:B2:23:CE:EB:55:22:07:08:6A:70:12:39:EE:C6
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1a:ad:34:30:80:0d:70:74:a8:35:9c:0a:92:5b:e6:43:79:
32:ec:ac:7f:0a:c1:a1:28:56:be:98:36:81:51:83:c9:f9:76:
7f:9c:a6:05:5c:0b:0e:f4:c9:f8:a1:d3:49:b8:45:d8:75:77:
86:9b:d0:be:b0:87:68:02:71:fa:a3:58:18:7f:74:4f:fb:0f:
58:f7:fd:ef:68:6b:f4:78:19:ab:1b:4b:c5:d7:41:8d:e3:6c:
ce:ee:08:8d:45:99:8b:a5:18:06:ed:ad:b9:5a:54:81:92:f0:
cd:25:9f:2e:71:fa:fb:ab:d4:4c:e5:34:19:ae:78:4d:e8:f9:
3b:24:5b:1f:59:a8:ea:ab:dd:ec:da:4b:a4:16:e4:9b:e1:fc:
cd:78:b9:dc:36:59:16:62:0d:0d:da:b0:aa:99:17:c4:dc:c1:
ae:09:c3:37:b6:ab:bb:77:66:74:83:50:f3:59:c7:09:27:b8:
8e:2e:33:7a:16:99:90:f5:f2:9e:3a:2f:3d:45:53:a9:b3:7d:
5d:36:fc:c0:12:d3:22:f0:ad:bd:9e:a4:70:70:dd:8b:6f:1f:
ee:c8:d6:44:be:37:f6:55:0c:93:c7:f9:25:ae:42:c4:79:59:
f6:e6:13:c1:5e:20:b6:5a:50:9e:4f:5b:5c:25:1a:2e:9c:4f:
11:25:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:49 2025 by rpki-client