Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: Z88ERkNadYDOZ86qD082SVUJEryg6ScqRFnrlytkY2M=
Subject key identifier: EC:0B:D1:E8:25:5A:F8:B5:79:D3:DC:57:65:94:04:1F:05:1C:D7:9B
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 0197B70EC815EC326DE9907FBFDC5756C007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: +6/MJQoYUxfGJsa6U5TVKH+SeqkQGJDKHxtvbcl1QyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c8:15:ec:32:6d:e9:90:7f:bf:dc:57:56:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=ec0bd1e8255af8b579d3dc576594041f051cd79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:a3:6d:8b:ad:ce:44:b1:86:80:b3:e6:7e:
70:d5:73:db:23:b9:d3:e2:7e:30:24:83:85:9a:ba:
3c:4d:75:37:03:54:18:fb:54:65:b2:7c:7e:db:59:
00:5a:c3:76:63:d8:a0:14:49:5c:12:bf:ab:7e:5c:
66:2b:b0:f7:02:fc:7f:c6:1c:91:23:c8:c5:3f:dc:
3e:08:74:70:3c:3c:e1:b0:bc:34:be:a4:4c:43:28:
8f:49:3a:2a:ef:d1:93:5e:c8:46:19:e8:fd:91:37:
d7:f4:6b:cb:49:76:12:d4:3f:e2:54:7b:57:58:75:
0a:37:f1:3a:c1:69:d5:33:3f:38:80:37:81:df:05:
4f:af:ba:db:d3:74:14:4a:b1:21:9a:62:e5:86:a1:
9f:aa:e7:bd:d5:46:a7:d6:60:a1:11:b3:57:b1:dd:
97:98:0d:0d:5f:b5:cb:9e:93:17:58:d8:f8:4d:ea:
6c:83:a4:b7:7f:49:c5:e5:99:b5:42:e8:ef:4e:bb:
94:b1:68:46:29:ec:56:34:60:94:95:96:f2:72:2a:
8c:4e:84:cd:8e:05:9f:9c:d7:3d:e4:75:27:08:7d:
98:44:57:a1:5c:4a:3a:8e:b4:d6:76:73:34:d7:7f:
87:b9:df:dd:b2:55:fb:7c:aa:f9:fd:6f:37:bc:53:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:D1:E8:25:5A:F8:B5:79:D3:DC:57:65:94:04:1F:05:1C:D7:9B
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:27:34:20:aa:48:28:d9:3c:3f:61:58:31:b6:d9:6a:d7:5f:
a1:33:98:01:3c:d6:40:e5:af:a8:57:2a:81:88:fc:94:a0:ee:
86:f6:95:a2:58:9c:d9:b0:28:94:49:93:3f:5c:89:1a:bf:15:
04:f6:56:5b:fc:04:d0:c9:fc:83:8a:78:11:06:b0:09:13:ef:
4e:a5:0c:cd:74:85:6e:00:7a:d1:13:8b:c0:6f:77:83:29:13:
d9:1a:19:d0:e6:25:11:45:12:f6:7b:c6:e8:b4:7c:74:73:19:
9d:bb:7d:17:e5:2e:ef:06:7c:5e:3d:29:46:8e:8f:1b:01:21:
92:8b:7f:81:7f:0a:8f:3e:6f:c4:69:b6:02:0f:85:79:f5:1e:
43:19:56:70:07:53:27:df:1b:f9:45:1f:51:05:48:93:c1:a7:
64:e9:83:10:4e:cf:8e:3e:e2:1b:5b:36:65:ec:79:54:1b:a9:
a9:1f:4b:91:65:c8:0e:5d:18:af:12:45:1f:62:62:17:fc:e8:
d4:8a:7c:93:3a:8f:e1:b5:9d:08:6d:dc:da:72:67:57:f1:67:
0d:68:2c:c7:f7:f2:56:a7:5b:c6:38:33:0f:5e:c9:03:d1:23:
a4:0a:09:d6:56:74:01:5f:bd:c8:f7:79:ef:31:8b:9a:ad:f5:
bf:07:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:36 2025 by rpki-client