Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: yzf6OW69OuM8DmfdD+P279c0rmdd3BTUrGRPsptLJm4=
Subject key identifier: FE:EE:EE:26:51:8A:ED:D9:A8:FB:44:E2:FE:4C:A9:4F:9B:5A:B3:27
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0197537D9904F0F8D5914E8CA2CC7C4ECC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 12DD
Signing time: Mon 09 Jun 2025 07:00:29 +0000
Manifest this update: Mon 09 Jun 2025 07:00:29 +0000
Manifest next update: Tue 10 Jun 2025 07:00:29 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: nXC4FwQl19W7JUNIDGpie9CV6PseWR77wOJh49k5BVY=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:99:04:f0:f8:d5:91:4e:8c:a2:cc:7c:4e:cc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jun 9 07:00:29 2025 GMT
Not After : Jun 10 07:00:29 2025 GMT
Subject: CN=feeeee26518aedd9a8fb44e2fe4ca94f9b5ab327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:bc:16:49:90:42:7f:9b:4e:68:5c:0a:0e:
ed:8a:e3:98:7f:9f:bf:03:83:36:48:db:78:58:77:
85:86:0d:3f:10:d4:72:cf:af:12:fb:75:44:21:d7:
7a:2b:08:0d:5e:35:37:e4:13:28:27:9c:f3:a3:34:
31:03:03:d4:3e:a9:ba:08:e0:5e:3f:45:16:b0:f1:
0c:a6:7a:02:36:35:37:89:0b:92:20:ad:22:6c:07:
70:48:21:c8:81:38:db:d8:4f:30:c4:d8:0b:b6:9c:
78:2d:68:c0:5e:52:b8:d0:d0:c7:62:6e:31:52:fd:
75:07:64:d5:47:99:71:d3:53:ae:91:6f:85:10:63:
68:28:32:1b:05:ec:f3:55:17:56:89:c3:62:99:f8:
55:20:ea:1e:dd:54:c0:3e:9e:86:80:e6:9b:48:76:
4a:ba:a8:08:c8:07:f0:2a:fc:65:ab:5c:77:75:ce:
ff:9a:6d:2d:81:83:a3:2d:1a:37:00:f3:17:13:0a:
d9:e8:5b:38:8b:46:bd:37:a1:da:71:f3:d9:23:f6:
b3:33:5d:71:ab:6e:83:c7:fc:ed:eb:f6:fc:48:b9:
9e:97:d4:62:89:7c:da:52:9f:44:63:08:dd:88:b4:
73:54:2a:84:50:cc:22:fe:ae:47:7c:72:4e:f0:10:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:EE:26:51:8A:ED:D9:A8:FB:44:E2:FE:4C:A9:4F:9B:5A:B3:27
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ce:c1:14:05:5e:5d:f6:56:c8:06:83:53:a7:e9:02:e7:05:
7f:c4:2f:54:98:c3:6b:13:be:cf:ab:d5:1c:4e:b8:97:6f:db:
e9:e8:de:46:23:dc:20:86:33:25:f1:0f:9c:61:a7:8f:32:e7:
b8:c0:e4:af:c3:15:ba:a7:f4:a4:ab:8c:10:88:51:18:7d:47:
82:08:97:e7:68:67:f3:f8:ec:d2:4b:70:cc:0b:c4:0b:25:21:
b0:22:b5:2c:60:34:6b:ad:f4:2b:40:3c:17:a3:a5:01:6b:90:
09:01:b1:a0:cc:bf:f1:aa:54:ab:60:7d:01:da:25:a1:06:0d:
f7:8f:44:62:cd:ca:f3:e8:5b:f7:b3:78:28:69:08:2e:02:6d:
0b:6b:be:7f:ca:00:0f:71:1a:ba:47:ef:24:6e:ba:d6:3c:bc:
f0:e5:fd:23:1d:c8:c8:7a:51:73:8b:29:78:6a:dc:5f:d9:85:
55:70:f8:6f:53:3a:e7:cf:a8:ec:b6:88:6e:d6:5d:6a:c9:1c:
20:46:29:58:1c:1c:06:82:b1:ed:ad:03:50:3f:ec:a0:03:ce:
48:f5:00:92:09:ec:3c:f4:9f:19:7d:7d:a6:2c:44:76:bb:38:
11:58:46:5f:2b:84:92:1f:f4:09:d1:7e:84:a6:f2:b5:5e:62:
8b:ce:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:38:38 2025 by rpki-client