Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: gTqBpudVBYygNT8GHRXun+1GJA2RMCesjjOBZsYMNL0=
Subject key identifier: C1:AA:EC:5C:63:B9:AD:68:25:22:0E:62:F8:04:60:DE:9B:48:17:66
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 0197B6D73444EE467782F44B8CCA8C594C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 0336
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: n3alg51K4BuU8InbjY1rLHDphsycOR0Z6j/g3uF/G4U=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:44:ee:46:77:82:f4:4b:8c:ca:8c:59:4c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=c1aaec5c63b9ad6825220e62f80460de9b481766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:88:f8:e9:a6:7b:89:f9:51:a4:23:fd:15:
d0:df:78:ec:1a:f2:2a:b1:22:a0:f8:ad:f0:3f:18:
ab:9b:c8:88:67:16:66:a4:28:01:45:36:67:d7:8d:
53:ce:3e:51:a8:84:1e:8e:05:5d:85:b4:2f:5f:27:
73:8c:cb:4e:3e:da:52:30:62:81:15:1f:92:17:0d:
c1:93:78:7d:6c:97:64:2c:2d:78:3e:fa:a1:de:29:
87:d1:0a:9a:d7:72:d3:c3:a3:00:e7:3a:44:2b:69:
fa:c5:59:d4:e8:d1:72:9d:92:59:26:10:96:b2:a0:
cf:b2:93:2e:5f:63:26:61:a7:f7:a6:48:0c:f9:8a:
d9:78:56:22:f5:8b:2f:42:bd:a9:8d:9b:6e:be:38:
e3:cc:ca:ef:fc:c7:84:d6:c1:a0:e6:4d:e2:c2:46:
2e:db:86:97:e9:40:4d:55:81:e9:e2:af:fe:77:8a:
27:b8:c9:6d:fc:dc:bb:57:99:81:a0:0d:3b:fb:3c:
13:25:52:1c:61:5c:7a:9f:01:d5:13:3e:2c:d3:fc:
2e:d0:f0:4e:b8:f5:40:3e:12:41:1a:85:3c:53:2b:
21:9e:71:47:3a:c7:8b:1a:a1:8d:42:f5:c6:83:60:
9a:d1:07:5c:84:71:e8:b2:8f:33:03:1b:62:e1:3f:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:EC:5C:63:B9:AD:68:25:22:0E:62:F8:04:60:DE:9B:48:17:66
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c9:c0:f4:7b:10:bc:38:d6:55:3f:29:5a:d3:27:5d:dc:32:
cc:b8:3a:aa:92:2b:c8:e2:d6:47:d5:98:d2:de:c6:01:5f:e1:
a9:d4:ab:64:9d:04:c9:b6:03:da:2a:f2:2d:ae:5f:19:10:46:
9d:c7:5b:4e:48:ea:b0:79:ba:9a:a7:16:05:21:7e:fc:ce:64:
46:b1:db:73:6a:bc:94:8f:a6:80:8c:8c:dd:6f:0f:7b:3e:54:
58:1c:cd:b0:cb:6a:40:e9:5c:85:33:26:17:43:bc:18:de:b5:
8f:88:56:96:81:e8:93:00:c8:17:58:36:38:63:be:fd:f2:ae:
12:83:f1:ed:c6:76:44:be:3d:37:dd:5c:c6:19:14:39:c9:eb:
e7:e8:47:13:f5:d9:b7:bd:b3:4d:60:ba:85:2f:14:cb:cc:f1:
0e:6c:b9:7e:48:70:23:28:7c:ab:f3:4f:2b:42:29:9b:a6:97:
48:81:12:30:ea:54:96:e3:dd:c4:16:fd:fb:4e:02:31:8b:51:
d8:4f:84:33:7d:5c:fe:de:a3:93:32:3c:cd:d8:91:72:88:f3:
e6:6e:20:de:7b:fa:4a:1c:c9:55:37:1a:b2:29:82:92:98:ca:
cb:d1:e0:cf:fe:d0:35:d4:6e:d3:4c:a0:32:cb:c7:c7:a7:20:
c1:55:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:24 2025 by rpki-client