Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: KSWyTs8SqFVVsaimps2Jgcl2JmtlfLYzj/HWYJCVrV0=
Subject key identifier: DF:96:D7:A8:48:FD:C8:45:D2:8F:CB:88:FC:C6:33:4F:28:48:88:DB
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0197B70EEECC86716C540A1C156A67AB2206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1537
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: aSyS5e2fiGKXtKkEqFrIgV7SLUZVwK+9+1pKI/E17No=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ee:cc:86:71:6c:54:0a:1c:15:6a:67:ab:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=df96d7a848fdc845d28fcb88fcc6334f284888db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:b5:54:68:4b:31:68:cb:e9:ff:fd:5b:8f:
e7:00:61:71:4b:27:3d:4d:f7:90:60:2a:84:6c:89:
b9:10:12:e0:fb:c6:0f:46:6c:92:9a:00:7c:b5:e0:
44:71:54:a4:9f:4d:50:e6:31:50:b4:a1:6a:2c:3f:
c8:a5:f1:b9:fc:87:91:11:f5:31:3b:d4:a1:8d:49:
0e:4e:0d:5d:8b:f0:40:75:14:ab:ea:77:e8:cf:b4:
d4:c3:c4:2e:6c:e7:32:5a:8b:36:07:19:ef:94:ee:
e8:87:2a:f8:da:96:5d:75:1b:8a:a3:47:33:44:b0:
b8:ed:e2:48:cf:14:f5:14:ec:4b:bc:24:64:c9:c5:
c1:5a:91:e4:16:34:6c:44:2d:a2:dd:0c:7a:10:e4:
b8:82:a0:ca:09:d3:c8:70:fe:b8:a6:62:37:88:ea:
ba:31:e8:da:05:d9:8c:98:cc:bc:95:72:30:75:6f:
e6:81:60:c3:b3:5a:34:13:4b:a0:7a:3a:61:d3:03:
4c:43:c5:b3:74:33:1d:0c:44:71:29:62:ea:6b:47:
61:9d:84:93:d6:d0:12:70:0e:b7:f4:98:bc:76:01:
72:c6:d8:d5:2e:51:41:c7:a2:1b:9d:e7:a1:90:25:
0f:2e:1e:b2:c1:3b:b9:ea:ac:b2:96:da:0e:37:04:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:D7:A8:48:FD:C8:45:D2:8F:CB:88:FC:C6:33:4F:28:48:88:DB
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:24:c0:52:b0:91:bd:b3:80:a3:da:74:52:d2:14:89:3b:
06:37:6d:7b:94:02:41:63:7b:f6:a7:52:6f:c7:86:46:9a:4f:
19:14:5e:e1:28:aa:95:06:25:08:8c:53:58:5a:64:01:22:78:
45:48:83:32:af:a7:10:c6:d6:02:a3:b2:e1:8f:7b:30:c0:b0:
f9:59:6e:5e:87:75:25:87:f6:85:82:90:ae:9f:ce:37:c3:34:
de:b5:d3:92:1e:e0:17:81:8e:31:91:12:61:2e:d2:33:06:ed:
f1:c9:c0:37:9a:09:8d:d1:dc:51:56:3f:d8:2d:7c:52:e1:81:
80:43:c7:4e:18:3a:cd:a4:af:ce:0e:82:b8:b2:d6:14:c5:bc:
49:30:1c:c6:c5:67:58:57:35:2e:68:c1:a1:11:38:37:4d:e7:
77:9b:49:8f:7b:bb:63:3d:77:33:36:11:fa:8c:55:47:1f:57:
c0:a7:4a:7b:d3:74:7b:78:53:b6:c1:39:92:6c:1e:d5:6f:c6:
e7:59:ce:d2:cf:1c:14:cb:37:b4:28:0f:2c:f4:a9:21:5d:43:
9d:23:7c:dc:c7:76:88:de:3b:bd:9e:35:16:07:78:4b:49:80:
98:0d:d3:87:9d:c0:99:b4:1f:bc:b6:70:47:5d:65:19:5d:f3:
e4:86:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:32 2025 by rpki-client