Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: r+7HbcxIe4pTQ0hQ5gKx8/VLOFdKhWJtjRBU00CWrgA=
Subject key identifier: 45:BE:25:0D:FA:2F:6A:FF:CC:7A:27:EB:1F:00:1D:01:E5:B0:8B:52
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 01974BFB3BF47DAE00B5D50A90C2D0E03596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 1160
Signing time: Sat 07 Jun 2025 20:00:45 +0000
Manifest this update: Sat 07 Jun 2025 20:00:45 +0000
Manifest next update: Sun 08 Jun 2025 20:00:45 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: 6QgvbI4O+gvfayfoVS3yZferfoyup756VX8gRns5cS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:3b:f4:7d:ae:00:b5:d5:0a:90:c2:d0:e0:35:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Jun 7 20:00:45 2025 GMT
Not After : Jun 8 20:00:45 2025 GMT
Subject: CN=45be250dfa2f6affcc7a27eb1f001d01e5b08b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:db:f1:d0:b8:22:72:ec:1d:da:ae:df:04:
8d:c2:fb:52:0d:21:68:a7:05:cc:30:17:28:31:5e:
94:c2:f5:7f:7f:ba:56:82:89:b5:43:b5:f7:40:74:
56:b8:d7:72:74:b8:7e:fc:d9:5f:e8:f5:89:d3:5c:
64:5d:68:bf:30:a2:df:14:bd:3a:e1:87:88:c3:4c:
b4:a4:34:fd:2a:bd:e1:63:35:c1:3b:71:98:92:b3:
55:e5:81:5b:d2:cd:bf:1f:e5:65:96:54:81:1d:14:
ec:eb:b7:cb:37:39:08:d1:0b:43:b5:b9:3e:b5:99:
0a:25:1b:e8:16:d1:65:24:f4:8c:50:7e:a2:5a:72:
68:80:24:e9:ad:20:87:a7:06:f1:a5:c5:a2:f4:1c:
e3:7f:39:68:38:96:26:74:d7:16:a7:48:27:19:6b:
9f:20:ca:ec:c3:fa:fa:88:4a:a3:0b:f8:12:c2:9c:
84:81:20:cd:77:2d:16:f0:76:5b:74:b1:6d:0b:0d:
dc:34:cb:f9:38:ba:25:96:02:48:82:93:27:e5:7c:
23:4c:52:26:f3:64:f3:aa:b9:72:3b:7c:bd:2a:9f:
1c:5e:58:9a:85:0a:64:a7:63:f9:b6:58:df:72:5f:
1a:4d:c7:4e:29:c8:1c:42:15:62:d9:fe:aa:13:fa:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:25:0D:FA:2F:6A:FF:CC:7A:27:EB:1F:00:1D:01:E5:B0:8B:52
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c9:0b:75:82:62:4a:cb:9a:0e:bc:cb:79:5f:08:54:9b:15:
84:e9:a7:db:fa:c3:e8:6b:c7:6b:cb:2b:86:7c:2b:cd:65:b7:
a0:28:4e:ab:85:eb:81:81:70:96:49:03:fe:80:54:90:12:6c:
f0:54:1e:6c:38:8a:f3:e1:f6:78:e8:3b:e9:38:74:01:c0:46:
12:66:e0:49:a1:d0:eb:89:ef:60:89:42:3f:5f:1f:87:56:1b:
80:84:6c:94:b7:d5:14:4f:37:5a:e6:63:a8:e9:15:c7:9a:82:
d7:14:c6:53:a9:68:6f:78:06:ea:c9:eb:32:3a:16:d6:a9:8b:
83:c4:5f:38:f0:ab:31:dd:31:cf:ae:07:48:5c:de:e5:cc:02:
42:6c:51:0f:20:76:dc:8a:96:c9:18:01:cf:11:38:d6:46:e7:
ef:e4:98:5e:88:13:22:fc:09:67:94:33:07:9d:51:94:23:a6:
22:a0:2f:2c:73:45:1e:cc:bf:53:65:b1:96:94:fc:9d:b4:26:
9e:12:73:6d:d5:31:aa:ef:dd:49:95:a9:ed:00:92:66:2f:eb:
3e:0f:f6:45:eb:5f:4e:a4:a2:54:9c:90:a7:a6:9b:9d:dd:06:
cd:42:f6:a8:84:7e:c2:8d:9c:c5:58:c3:7a:fc:48:4c:fe:45:
b3:c3:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:07:30 2025 by rpki-client