Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: 9MgttdtO2FLr4v32DBpAyWzg4o+4TBbYdjDvE/qBSW0=
Subject key identifier: 8F:E3:A1:38:53:07:9C:9B:48:33:DF:E5:16:11:93:4C:38:3B:37:5B
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 01974AB16D22444584EFC6B371079EDF9C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 150A
Signing time: Sat 07 Jun 2025 14:00:31 +0000
Manifest this update: Sat 07 Jun 2025 14:00:31 +0000
Manifest next update: Sun 08 Jun 2025 14:00:31 +0000
Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: Tl2ODrlNpw45+eeAjejKBjCQbwzlY1zaxNut3JrECkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:6d:22:44:45:84:ef:c6:b3:71:07:9e:df:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Jun 7 14:00:31 2025 GMT
Not After : Jun 8 14:00:31 2025 GMT
Subject: CN=8fe3a13853079c9b4833dfe51611934c383b375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c3:ab:56:81:b2:ee:3c:cb:1c:e9:34:23:4e:
9e:0b:21:20:02:76:7a:5c:9f:5a:38:90:97:f6:33:
c7:c8:f9:41:db:36:7a:16:e6:12:af:74:5c:c8:91:
e1:51:85:b8:ee:7f:b3:b8:dc:40:d1:e7:de:dc:09:
a2:f0:2c:47:5b:dd:95:13:4b:3e:ef:4b:8e:70:84:
d0:36:08:5f:45:75:f6:6f:ac:12:95:02:24:75:76:
70:ba:8f:37:f3:c9:28:96:06:30:d7:f3:1b:3c:ef:
f6:19:43:c6:d4:44:4f:1f:be:5e:7b:a8:10:42:bf:
9a:92:1b:25:54:3e:c4:9a:08:38:70:db:94:23:06:
75:56:c6:b1:11:e9:7d:85:eb:15:d0:07:f2:fc:76:
7d:d1:6f:1e:68:3d:91:fe:27:57:f2:94:c8:00:1f:
45:ab:81:0a:b5:07:38:41:62:a8:6c:9e:9f:d2:ab:
0f:60:53:61:53:b0:76:ce:28:fd:d9:2d:b6:0e:3a:
23:74:c6:b3:9a:c3:62:4d:81:6b:66:4f:d8:ba:63:
c9:c8:e6:9a:67:fa:ce:c1:08:36:92:a3:1d:cd:47:
59:69:ad:50:7c:e6:54:c1:e7:e4:bb:68:66:98:0e:
61:d8:04:14:89:ad:56:4b:a1:09:0c:45:c3:bf:7f:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:A1:38:53:07:9C:9B:48:33:DF:E5:16:11:93:4C:38:3B:37:5B
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:69:c5:eb:5c:71:be:95:23:bd:c3:65:00:aa:e2:5c:ab:
55:a6:bf:bc:ae:42:df:b6:6f:bf:b1:e7:8e:b3:92:91:2f:d2:
ce:b4:2f:e7:d9:49:ed:2b:42:93:13:1f:e0:36:f7:e3:3c:91:
be:06:02:65:0b:5f:e1:35:48:c4:eb:7c:59:5e:0a:08:4e:44:
e5:01:ad:9f:5e:25:25:a6:6d:ad:09:9c:7b:bd:ba:db:5c:87:
4b:00:31:95:fc:ec:e9:67:20:fd:30:a6:65:ed:62:48:ae:5f:
31:bf:fb:36:a4:a7:6f:df:cd:76:49:84:f2:07:6e:04:0b:1f:
90:83:7e:07:9f:69:c0:ec:c1:e9:1c:76:66:f4:41:f2:e2:a9:
1f:91:da:9c:7a:26:77:17:a4:d6:93:39:13:4d:d2:89:ad:5f:
88:27:b8:19:a5:4f:71:60:5e:21:3e:37:2a:8e:94:4c:98:52:
c1:7b:f4:f2:ee:96:97:73:12:34:f9:5f:de:5b:75:84:b9:f9:
7a:63:41:7c:15:0f:39:16:33:b4:8b:c6:b7:1b:20:73:29:85:
cf:dc:66:2c:31:a9:c4:da:91:01:b9:cf:03:0e:4e:e8:2c:ae:
8f:13:f9:03:72:ed:b3:bd:ff:a3:07:4b:72:f7:df:f8:0d:46:
fe:1a:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:27 2025 by rpki-client