Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: +endeS/Jhpg6M7LoQoxMyD8nmE2cR58JpgevEfBYWEY=
Subject key identifier: C2:75:9A:00:D8:10:90:C0:9C:9A:4D:0B:8F:D1:85:85:EB:D1:A1:45
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0197575A5C6A16087DABC09742F6E826A020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 12DF
Signing time: Tue 10 Jun 2025 01:00:29 +0000
Manifest this update: Tue 10 Jun 2025 01:00:29 +0000
Manifest next update: Wed 11 Jun 2025 01:00:29 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: VTV6jfY9ssagvNBK6sKAWREqn6DAJ0aGdX8u+rBtgC4=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:5c:6a:16:08:7d:ab:c0:97:42:f6:e8:26:a0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jun 10 01:00:29 2025 GMT
Not After : Jun 11 01:00:29 2025 GMT
Subject: CN=c2759a00d81090c09c9a4d0b8fd18585ebd1a145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:ae:29:7a:ab:bd:77:52:c9:8a:c7:07:d6:
c5:19:fe:d4:3e:4d:ab:29:56:fe:85:ab:85:dc:0f:
85:a0:e8:5e:69:94:54:5e:48:8d:c0:a5:f4:57:b8:
d2:2f:13:f4:3d:dd:31:40:35:65:f8:cc:8b:6c:48:
fd:27:bf:6f:a6:c9:0a:d7:1a:de:e7:ba:d2:af:2b:
57:5b:93:6f:86:2b:72:82:7a:d4:c2:45:66:05:a6:
9c:31:59:8c:ee:d2:26:9d:f7:eb:25:cc:31:65:cf:
94:2d:48:e5:a2:51:73:79:af:4a:e3:e3:7e:6f:1a:
4b:4d:b7:9a:61:23:eb:d5:7e:62:52:af:41:40:82:
31:1d:de:cc:51:c5:f9:f4:1d:4e:99:fb:2a:6e:87:
07:c9:a4:72:e2:89:7b:f1:3a:e0:ce:5e:a9:cb:2c:
27:7c:2c:c9:d3:91:bb:8f:9c:fa:4c:5d:f9:7b:cb:
9e:d1:1f:3c:04:89:b2:fb:b6:90:eb:05:28:cc:45:
50:2e:8c:e7:7e:66:4c:39:1d:e0:0c:34:68:f5:09:
21:7f:06:ba:5b:b1:05:f0:58:dc:35:5c:ab:a5:4f:
f2:cd:4c:70:ce:bc:1d:74:c2:af:60:47:9e:dd:70:
8b:8f:76:e5:46:3a:9e:1b:18:04:5d:6d:4b:e7:61:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:9A:00:D8:10:90:C0:9C:9A:4D:0B:8F:D1:85:85:EB:D1:A1:45
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:70:81:69:1a:60:18:fc:04:cf:64:ff:d3:e6:77:6d:8b:
d7:22:0d:11:fc:3c:2c:65:1a:0a:ab:4d:5d:d1:e0:65:4e:8c:
c6:da:b2:ae:4d:01:ae:de:7b:d6:06:ee:27:2d:50:2f:d1:e0:
f4:ee:71:ef:9e:05:32:f4:e0:91:a0:d5:01:df:01:eb:76:cf:
c4:59:18:8d:1f:f6:43:0e:71:fb:07:41:2c:17:74:c0:f4:85:
e8:42:b2:ba:b5:50:26:7a:17:ea:7b:a0:5d:69:f4:7c:4b:56:
07:05:2a:e6:9e:2a:84:22:a1:23:47:ca:7c:01:fe:6a:fc:83:
b3:38:0b:21:ae:05:22:ca:85:3b:ab:33:df:da:93:a0:6b:bc:
bc:61:ae:ea:27:4f:98:f3:b5:ea:fa:9c:b2:68:9d:f6:d6:7d:
4f:9a:0d:99:cf:00:22:e7:87:7d:f8:96:a4:1e:da:04:b8:a3:
c5:ed:35:28:b5:a0:d9:8c:ed:8d:5d:81:7b:34:72:0d:0a:7f:
16:00:99:ef:61:8b:63:d9:66:3e:a9:b5:bb:d6:d2:89:79:ba:
e1:58:b6:3e:15:e7:9d:4d:0e:de:70:0e:63:66:b0:79:f4:ca:
26:67:2e:9f:b5:61:ae:87:71:ef:f8:8c:bd:01:81:c3:61:b8:
9e:35:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:00:28 2025 by rpki-client