Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: 8u5hLipMvux91noFjY64cCMtJndmgrDmcKk/HIAh8zQ=
Subject key identifier: F4:42:7C:33:7E:D7:F5:0E:56:AD:2F:37:12:12:72:75:9C:79:6F:5C
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 0197B77CC19A99BCF3D2187A12EBD35DB9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 06D9
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: QUKwiH9GpKB8hBp8PoZVvIODl7pwYnrp4xWMgrXha5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c1:9a:99:bc:f3:d2:18:7a:12:eb:d3:5d:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=f4427c337ed7f50e56ad2f37121272759c796f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:51:c7:a4:21:f4:db:89:66:88:76:e2:8f:
22:7e:9b:c6:eb:8f:e5:d3:22:49:3a:fa:e4:d4:78:
c4:c2:92:d2:84:cd:df:c6:d7:6e:7b:c2:22:6b:a8:
7d:52:d8:ab:cd:0a:24:0b:b4:f5:42:70:53:2a:cd:
ed:77:47:d9:9b:e1:fd:03:00:c9:ad:cb:d6:ca:3e:
55:f6:d2:c0:57:1a:71:89:7d:0f:9b:e5:30:ee:95:
c6:8f:2f:73:c9:b9:6b:66:1a:c2:c0:a5:0c:8f:5f:
a1:f6:7b:cd:55:c0:b2:ff:7f:f1:49:8d:d1:11:a7:
35:bc:79:96:70:c1:f7:a9:9f:0d:c2:20:f2:15:66:
05:21:b2:f3:d8:86:f5:c8:b3:50:1a:2a:c9:f9:16:
c9:11:03:d0:aa:e1:2c:1d:c8:b0:12:b4:d2:85:b4:
f2:f0:0d:79:a6:56:dc:6f:fb:59:21:d3:b1:b3:5a:
db:ad:82:0f:1b:cf:49:d7:e8:a6:8a:7c:ff:db:dd:
e4:76:3a:56:52:f3:39:cf:5d:4b:c0:7b:f6:70:03:
1b:fd:5a:bd:ff:ba:45:55:0b:b6:21:98:6b:18:19:
34:41:58:32:ca:08:38:65:18:38:0e:a9:49:5d:e0:
85:e0:72:fc:7d:9d:7c:ca:7e:0d:5d:4c:0d:c0:0f:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:42:7C:33:7E:D7:F5:0E:56:AD:2F:37:12:12:72:75:9C:79:6F:5C
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5b:02:bd:7e:21:23:e2:bf:90:49:1c:4f:6d:c0:8a:37:43:
a4:af:ad:c7:67:44:09:94:2e:90:fe:17:c9:13:6a:2b:3e:73:
8f:ea:da:14:98:f4:a6:f8:e7:70:6c:5f:87:43:6e:20:be:b4:
06:d0:00:dd:de:c3:66:2d:50:aa:0f:7d:30:0b:bd:3a:df:3a:
57:30:ac:17:f5:b2:72:c3:fc:91:28:f6:25:7f:72:3d:c1:b4:
a3:2f:d3:9d:39:2c:f3:42:3a:b2:2a:3a:58:a8:2a:c2:92:c7:
15:e5:3c:34:60:e5:38:89:2d:5f:3c:35:cc:bc:71:83:2d:91:
c0:bd:cd:09:51:81:75:91:26:39:9d:ce:f1:77:6e:53:4f:d5:
24:9b:64:9e:bf:29:a9:29:5c:58:53:99:82:8b:30:e1:5a:69:
e5:9b:11:f7:49:dc:6b:48:9f:9c:7b:58:33:5f:18:0f:40:45:
df:78:17:30:1a:a3:0d:91:c1:40:74:c0:9a:7b:60:10:c4:b9:
38:0a:45:fe:93:4a:d8:38:f7:ff:b7:3a:31:a5:1f:3b:fb:f7:
8a:a5:af:19:b6:79:a2:dc:1d:b7:ff:3c:c5:64:51:af:8b:13:
29:d3:75:09:06:50:80:e3:ef:4b:d9:a4:09:39:77:b2:10:75:
80:e7:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:58 2025 by rpki-client