Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: BMxF9T9ZAlTj+jVKwKedEvFgDC/JaidAHCIs1jVbRjk=
Subject key identifier: E9:B4:2D:C9:DE:6C:6F:97:D5:16:73:73:BE:95:BD:56:A5:D9:00:AA
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 01976929F8C295ABC4A544C2360DE11C13A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 12:00:47 +0000
Manifest this update: Fri 13 Jun 2025 12:00:47 +0000
Manifest next update: Sat 14 Jun 2025 12:00:47 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: FesufKvfEF3SA9Og9kH/7m5y6S30D7S6H58dk5qo8io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f8:c2:95:ab:c4:a5:44:c2:36:0d:e1:1c:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Jun 13 12:00:47 2025 GMT
Not After : Jun 14 12:00:47 2025 GMT
Subject: CN=e9b42dc9de6c6f97d5167373be95bd56a5d900aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:67:b0:e4:f3:83:f1:17:e5:28:9f:cb:c1:
35:ba:a3:43:60:4f:19:d9:45:60:ca:ec:97:96:9c:
0d:67:68:f7:de:3b:40:df:42:af:fc:6b:47:a9:b1:
91:32:15:36:d6:07:4a:f0:85:71:ae:c1:40:10:89:
07:7e:56:df:41:a4:4c:a4:09:81:e9:b5:29:74:50:
09:0a:c4:a8:5f:10:84:ef:0a:f4:ed:33:5c:01:38:
f1:53:5e:ff:d2:9a:f5:f6:0f:a7:7c:12:44:c8:f6:
75:9d:3c:3b:d1:8f:28:0f:5e:2c:67:ae:22:db:41:
d2:f2:fa:e8:47:00:30:73:06:76:ab:d8:cd:bf:e4:
cd:59:74:b0:ae:f7:ef:35:ba:4d:1b:18:bc:49:22:
7a:98:a6:f4:56:bb:2c:22:ba:2f:fa:37:87:38:13:
fc:9f:c6:a0:23:43:b6:cf:9d:1e:06:c7:d1:a3:88:
37:45:b3:1b:8d:b5:fb:d4:f4:9b:41:87:a6:d0:f1:
d7:21:00:6d:95:c5:9a:a5:96:d8:b7:67:4f:d0:46:
cb:a7:f2:ed:16:97:53:a3:0d:98:5d:d5:dc:b0:24:
de:b4:fa:65:21:1e:37:14:ce:be:86:37:ce:b8:53:
c0:b1:b7:b0:b3:8f:d5:6c:01:e8:46:db:db:c8:d7:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:2D:C9:DE:6C:6F:97:D5:16:73:73:BE:95:BD:56:A5:D9:00:AA
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4b:99:04:2a:2e:75:94:79:97:08:c4:b9:d3:32:c1:94:33:
21:77:28:93:b0:7f:b8:dd:ba:db:52:56:cb:61:27:1b:f1:45:
fe:46:c7:44:48:28:4e:67:ff:72:af:d1:49:18:a1:5a:28:39:
b0:a6:cb:e1:57:5e:e5:69:ed:e8:be:cd:90:ba:7e:37:77:37:
9f:55:b7:1e:47:cc:fe:ba:95:2c:93:18:93:33:d2:52:06:f8:
30:46:77:08:ac:ef:e9:cf:50:4d:af:be:8c:59:33:5f:96:e5:
4f:df:56:2e:fe:fe:77:ea:70:f3:35:aa:6c:c2:93:ae:a2:c7:
a8:fb:76:90:ae:d3:88:e1:27:34:a9:cc:c2:f6:19:19:1c:e2:
57:f8:2a:f6:86:a4:9c:3a:7e:2c:bf:04:96:36:85:06:a9:cd:
f0:37:00:61:31:cb:b9:c5:2a:e6:22:2b:ce:08:4e:8d:25:c5:
06:94:19:0a:67:14:99:b0:f9:e2:01:96:f7:47:30:57:de:a0:
bc:f9:3a:a4:3f:87:46:4b:fc:68:c4:e6:e0:f5:d0:eb:88:6c:
5b:8e:d4:73:31:1a:3f:a9:1a:cf:c3:70:60:55:21:85:05:34:
f9:4f:66:c6:0d:be:db:a8:ba:ad:f4:39:e2:16:d0:60:02:55:
37:80:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:19:18 2025 by rpki-client