Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: SDDiyrLE5TXyAxMHBRYC3LVx02EuI+l/UwnF/kPsNH8=
Subject key identifier: DA:B7:ED:D7:1B:BC:60:CC:4A:B3:7A:CD:4A:B3:53:7D:73:77:C5:46
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 01975D25A2108B7F239ABD43F13B6C1FC81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 12E2
Signing time: Wed 11 Jun 2025 04:00:36 +0000
Manifest this update: Wed 11 Jun 2025 04:00:36 +0000
Manifest next update: Thu 12 Jun 2025 04:00:36 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: XnPXIvwIcvW/gZIzTgBdAZF6on1syb7urkrvcz95rCw=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:a2:10:8b:7f:23:9a:bd:43:f1:3b:6c:1f:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jun 11 04:00:36 2025 GMT
Not After : Jun 12 04:00:36 2025 GMT
Subject: CN=dab7edd71bbc60cc4ab37acd4ab3537d7377c546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:88:70:4a:1f:fd:0e:4c:10:b1:ab:b1:3e:
14:76:71:05:76:7b:6e:3d:9a:55:61:ec:c2:6d:39:
5d:d1:bc:75:c1:bb:26:31:ca:9a:d0:9f:ea:03:11:
8d:2d:f2:f3:23:1b:d7:4e:e3:71:4b:d7:a8:b9:0e:
c3:66:64:d1:71:6a:8d:57:c5:69:cb:c2:3d:c4:87:
cb:83:5e:9d:0f:34:4c:d4:1d:57:06:14:82:5c:48:
33:99:e6:35:44:3f:6b:81:f2:8e:77:fb:0e:67:f6:
54:6e:47:cc:49:68:63:c5:eb:cf:78:e0:b9:81:2c:
e2:8a:72:8e:52:88:ac:94:05:8e:ab:f8:53:88:b8:
48:a2:65:26:e0:08:23:e2:73:81:72:47:39:fb:37:
c9:6d:5d:b3:b4:21:c4:bd:43:8d:de:68:a7:e1:4f:
46:77:0b:c5:00:fe:a5:d8:df:13:cc:5a:65:1a:51:
54:7c:da:6b:2f:0b:a0:91:17:4b:df:12:4b:f1:de:
b6:1d:de:bc:77:3e:25:ee:83:8a:be:a7:56:89:df:
28:96:48:9a:78:ec:ad:e6:d1:c1:cd:1d:ee:20:8f:
c9:82:a9:a6:e6:bc:87:98:47:0a:db:34:f7:60:86:
cb:6b:9e:8e:5b:59:3a:0c:4d:a3:2a:21:6c:a4:e6:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:ED:D7:1B:BC:60:CC:4A:B3:7A:CD:4A:B3:53:7D:73:77:C5:46
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:72:65:80:82:22:af:76:6b:b6:08:12:49:fa:e4:a9:85:22:
ee:91:63:56:33:f5:b4:f4:59:66:aa:39:3a:fb:d5:00:8f:25:
fa:44:19:06:9e:b5:0c:21:61:7e:4f:90:88:1a:2f:f5:87:70:
00:38:27:ea:80:7b:d8:05:12:c6:bd:0a:36:53:e9:bc:96:cf:
38:d4:93:57:64:a5:ee:8b:58:83:96:92:35:a3:a0:fb:4d:04:
91:8d:40:12:e8:6e:d6:df:3b:d0:ef:1b:fe:9e:14:55:90:f6:
e7:95:de:a2:18:78:18:79:b2:03:75:7b:d5:4f:b1:8c:a8:38:
18:86:6c:4c:ae:bc:a9:74:ae:c7:c2:85:a6:c1:57:dd:ea:52:
39:db:50:d0:38:7f:58:3e:84:ef:2e:aa:15:d9:4c:67:1a:15:
5d:54:8a:d0:ef:3a:a7:71:4a:9f:b6:9c:95:3f:fb:94:64:94:
38:54:12:94:23:ca:45:f4:e9:65:7b:6d:a0:49:49:37:00:b2:
4e:fb:ca:5e:3a:d3:8b:13:62:f3:8d:8f:2c:fc:28:f6:e5:16:
07:ba:53:73:71:5d:9e:df:44:58:f0:23:f5:e0:12:fc:69:43:
65:fb:ff:cd:e0:3d:44:0f:bd:a0:83:8d:67:03:86:97:a4:ad:
11:ba:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:08:08 2025 by rpki-client