Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: eBecUdgaQugpgYbBsfqeNDHGQXfnTQdlrQPtb6bSjcw=
Subject key identifier: 46:B0:16:2F:27:48:7F:88:18:63:50:BB:8B:4E:B8:C2:45:EB:38:01
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 0197B6A109375A05346B7681BA1DCD2909D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: wYKty5nXqszv1rEATm88dKgXmEX6KwL+E56qCjHpczw=)
2: VGpF_n1XPkcrX19VIZfEe9zTBfU.roa (hash: ZCWW25MvdyoXZn5hf+wK4mNxI/epLix5Iz9z1Fs5NMw=)
3: o8N6mibH7HzRPfXSA-XguojRJmE.roa (hash: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:09:37:5a:05:34:6b:76:81:ba:1d:cd:29:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=46b0162f27487f88186350bb8b4eb8c245eb3801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:88:c3:ae:6c:26:b5:16:c5:de:d7:8d:ac:
ef:13:11:de:aa:d6:0a:d3:c3:10:b7:b3:fa:40:5c:
ae:c8:36:2d:3e:39:1f:7c:f0:a7:84:76:26:cc:f5:
15:29:d9:e0:43:2b:5c:da:0a:38:71:01:b8:59:07:
ce:18:62:57:8d:f3:99:05:19:7c:7e:8b:23:b2:dd:
6d:67:3e:e6:92:25:c4:0a:63:78:e1:2b:98:3a:a0:
95:00:7b:52:c6:f8:54:6a:3b:80:7e:45:ef:59:dd:
66:8a:22:f8:45:9d:c2:96:b6:73:62:23:8c:68:3b:
78:6c:56:ad:20:a6:41:15:50:e9:8f:2c:b4:db:a6:
06:e2:bc:9f:ef:c0:16:01:06:c8:33:43:2a:14:4a:
11:9a:61:f5:c8:00:4f:b0:06:3f:41:3a:60:ea:94:
5c:c7:9c:93:f2:e4:b4:e8:2e:7d:ee:50:93:a2:67:
1b:8b:29:31:e2:e2:11:9c:9c:bf:55:50:2c:06:1a:
5f:c3:c9:a1:e3:37:28:c0:b4:80:40:ab:8f:c5:c3:
bd:63:04:bf:ec:bc:20:cb:66:f0:38:ae:34:55:9b:
e4:c0:0d:b6:ed:85:87:86:dd:28:8f:46:69:ec:72:
3b:4b:a9:d2:c8:a3:a3:1c:49:c4:b7:03:c3:b5:af:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:16:2F:27:48:7F:88:18:63:50:BB:8B:4E:B8:C2:45:EB:38:01
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:95:78:55:e8:d9:4b:bc:39:f7:4d:74:dd:88:8e:b3:71:87:
a7:81:4d:f0:07:9c:fb:ed:e9:88:71:4e:32:d9:e7:fe:59:c4:
71:23:98:d0:1a:57:45:72:62:25:24:68:c4:1e:1a:28:17:94:
63:af:b0:56:f2:3c:76:19:aa:f8:9e:4a:c5:c0:7c:14:16:fb:
0a:bb:50:e7:2b:0e:88:16:fa:76:14:07:37:70:cf:e1:70:f7:
93:fc:53:39:a6:a8:16:bb:f6:0e:19:87:9f:a6:79:d6:63:63:
5b:c9:d8:c4:61:80:d1:65:3c:1f:37:f2:07:28:56:2e:b1:c1:
a5:be:3e:37:36:99:13:fb:53:8c:6a:ae:65:91:4e:f5:51:16:
5f:ab:1b:f6:3d:0d:2f:7f:57:a2:2c:b7:a1:6d:52:ab:cc:c0:
2b:5d:e1:8c:e4:a6:e9:16:81:c5:05:4e:11:fa:cf:ae:09:95:
f7:7c:26:ed:7a:d7:16:5f:05:68:82:3b:83:50:80:2a:5e:ff:
22:57:14:22:e6:b9:04:50:fc:86:ad:96:c8:aa:75:aa:e0:59:
16:6b:87:a4:20:0f:bf:1a:43:3d:ed:5a:a2:60:bb:6f:60:49:
54:75:a3:a7:8e:fc:55:af:85:8f:8d:89:78:20:40:76:05:8e:
33:0c:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:14 2025 by rpki-client