Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: RHUrlINPDwwJefzPBSfwkIE/2W5E05ktw6s6FMLOYQU=
Subject key identifier: 58:A3:E0:04:F1:D7:B6:DB:E7:EF:97:EE:F1:CA:A8:56:AB:80:D5:C2
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01974A0C8CC3CB2423340A7764989ABE41FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 12C4
Signing time: Sat 07 Jun 2025 11:00:25 +0000
Manifest this update: Sat 07 Jun 2025 11:00:25 +0000
Manifest next update: Sun 08 Jun 2025 11:00:25 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: 01bprQhRmZUPmTQh8r9aPNFFP/QPsyWJey7VC/5SSw8=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:8c:c3:cb:24:23:34:0a:77:64:98:9a:be:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jun 7 11:00:25 2025 GMT
Not After : Jun 8 11:00:25 2025 GMT
Subject: CN=58a3e004f1d7b6dbe7ef97eef1caa856ab80d5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:98:36:41:4a:cf:c5:08:ed:1f:f0:ef:a2:
b0:19:80:7a:16:5b:09:3d:2b:37:be:86:71:bb:65:
21:1f:65:46:cd:f9:f9:29:f9:fb:5f:1b:74:38:eb:
08:5a:2b:d4:9b:c3:4e:10:f2:26:8c:dc:5a:7f:bf:
fc:cb:95:48:8c:4d:ed:40:04:dc:ac:fc:77:ef:21:
f5:ab:be:b1:8e:75:04:d5:5c:e6:54:d6:ef:d3:63:
9e:89:8b:06:43:4d:76:2c:32:cb:d6:38:08:a7:7c:
70:ea:53:a7:ee:d1:b3:4a:cf:23:6a:33:f7:a7:cc:
18:0a:8d:a1:6f:08:48:de:97:96:6a:5e:da:e6:cd:
93:04:3d:fe:10:7c:f7:66:0d:ff:26:c6:9f:34:e3:
d6:b2:f3:8b:54:f5:50:c6:95:7d:96:35:d0:11:ed:
21:dd:73:67:52:02:5e:e1:6e:e7:f3:fd:2d:81:d9:
f6:2b:9c:de:c4:4b:94:7d:40:74:66:7c:d7:69:15:
b3:e3:01:b0:9b:2b:66:2d:3b:b7:e4:2f:80:18:a0:
74:23:cc:b1:f1:6e:71:44:be:08:5f:8a:82:41:21:
5e:d9:85:f7:0b:95:91:0a:35:59:67:c4:5c:28:ea:
75:4d:e7:32:8c:6e:39:e1:d5:d8:4d:a6:c8:ed:b3:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:E0:04:F1:D7:B6:DB:E7:EF:97:EE:F1:CA:A8:56:AB:80:D5:C2
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:a2:24:38:79:95:7e:9c:82:85:98:15:22:42:10:26:a8:
bb:9c:28:08:d4:4d:00:4e:b0:cc:8e:f8:9d:7a:08:70:5a:95:
7c:d8:81:25:35:51:9c:c0:fe:e6:5f:de:ea:21:f3:90:38:35:
db:4a:81:46:fc:51:90:84:c6:52:82:8f:fb:7a:ad:5b:c5:c0:
70:27:0e:19:07:98:4c:dc:8f:fa:d9:ea:c7:cf:21:0c:16:eb:
79:54:4c:7b:18:d4:1b:70:c0:e7:7b:02:fc:c1:c9:43:82:5d:
68:83:bd:3b:c7:58:d3:5d:c7:b0:0a:9b:5c:25:da:15:08:a5:
20:0b:ec:a4:37:34:ca:d0:de:a9:6b:41:14:c6:92:e2:22:51:
a7:2c:d7:6e:60:3f:22:8b:85:0a:c8:50:31:0b:fa:30:a9:50:
d4:1d:ff:2c:36:a6:e5:b6:50:f7:f3:01:8d:bd:3f:9c:79:66:
4e:48:4d:f5:dc:e8:17:97:d3:4a:62:72:cd:58:a7:57:92:9e:
07:9a:94:5d:04:2f:65:c5:df:06:05:fc:43:12:a0:44:e6:ae:
2d:6e:70:fd:14:ab:f5:b3:c3:84:93:0b:ec:d0:98:20:32:0d:
dc:9e:7a:29:34:35:5c:95:36:b8:fa:97:ea:03:64:da:5c:41:
1b:6f:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:40:15 2025 by rpki-client