Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: +1rV+cTRvUh0mUBO7YoInd25ZmZxduv0JwU/xUOc2VI=
Subject key identifier: F9:BB:3E:D8:F9:FF:A2:AA:C4:02:14:BF:68:2A:E5:C1:B1:97:8F:08
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 01974CD6CC28B9FE5D14B7C1FD371F127497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 0668
Signing time: Sun 08 Jun 2025 00:00:34 +0000
Manifest this update: Sun 08 Jun 2025 00:00:34 +0000
Manifest next update: Mon 09 Jun 2025 00:00:34 +0000
Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=)
2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=)
3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=)
4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: yQJ/S8d6Id+Qa0iacIJ/6o2uYdq5NOAMuKiuskqOVFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:cc:28:b9:fe:5d:14:b7:c1:fd:37:1f:12:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Jun 8 00:00:34 2025 GMT
Not After : Jun 9 00:00:34 2025 GMT
Subject: CN=f9bb3ed8f9ffa2aac40214bf682ae5c1b1978f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:15:47:77:a2:07:5b:b6:b3:66:cc:e2:1d:
fe:a5:bd:c0:ad:f4:56:58:65:60:91:9f:d4:22:a1:
24:90:74:c8:a4:c5:5c:ca:62:49:3e:a6:ec:9b:71:
0b:0a:92:ec:23:9e:94:6b:f8:b7:26:29:18:47:b9:
85:e3:31:44:81:7e:f3:67:2d:49:dd:5d:e3:e9:97:
ed:99:72:5a:79:bd:70:b2:40:31:54:91:84:a4:50:
b8:24:27:de:70:f7:ee:fd:bd:45:ca:d4:76:b1:c9:
1e:a6:a3:71:a3:06:8c:69:6d:c1:f4:a0:af:97:fe:
27:d9:60:23:66:09:4c:73:6c:8e:09:29:af:68:a2:
71:71:c5:5e:7d:c4:84:f9:1e:b9:42:63:fb:21:f3:
75:f5:a9:04:f1:28:60:ea:e3:d6:2d:64:d2:dc:37:
5d:2e:19:22:d7:e4:f4:1e:74:12:19:07:2a:02:88:
ee:bc:b1:bb:8a:b8:bb:c8:d4:9e:fb:37:4f:09:20:
df:05:b7:25:78:e1:33:66:16:01:1d:9b:bf:e8:45:
09:9b:c7:00:1a:9c:3c:56:88:86:1f:ca:21:40:f1:
56:e8:73:e9:cb:5f:e8:fa:11:ae:4a:d4:af:6c:08:
db:66:25:46:8c:ac:6a:25:7d:38:e4:59:92:15:80:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:3E:D8:F9:FF:A2:AA:C4:02:14:BF:68:2A:E5:C1:B1:97:8F:08
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:48:db:cb:4f:d2:66:17:71:38:ec:b0:a4:d7:a8:09:aa:
ba:c6:46:e0:fb:af:96:d6:49:ef:30:78:31:28:aa:88:f0:33:
f3:13:ab:46:be:25:b1:50:09:3e:83:61:2c:34:9e:d6:ba:c0:
51:4a:27:29:32:69:a2:e8:e8:d1:ae:9c:af:d7:e5:38:71:6a:
cd:40:54:13:54:b5:db:b2:4e:e6:d3:8e:62:35:c4:ce:a4:b6:
d3:9b:7e:10:d7:4c:b5:5f:b6:d1:91:0c:aa:4b:5c:ed:af:66:
83:9a:44:1b:7b:27:3c:d0:7d:b6:6e:12:d3:6d:ed:cd:cc:f6:
15:d3:5a:df:ae:7c:fc:49:2c:57:1e:c0:3c:67:85:eb:53:d6:
db:c6:ff:65:e5:6d:d9:85:6a:c4:4d:f8:36:de:fd:ef:cd:03:
74:13:c3:ea:c6:d9:d2:4f:0d:cd:bf:d9:66:a1:4a:a6:e0:22:
b5:27:b4:9e:3b:c6:df:3b:54:02:51:67:00:8a:5b:41:0f:1b:
8e:66:b1:2f:c7:79:3a:50:83:c6:24:6b:9b:af:f6:e3:2b:66:
78:91:4a:b4:13:e4:7f:d9:a0:21:fe:5d:10:25:38:b5:0c:b1:
e4:b8:2b:da:db:78:fd:f5:70:95:a2:da:16:67:3b:9d:9f:0c:
4c:3c:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:06:52 2025 by rpki-client