Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: Qc8NXF5MHtIakNmQFC0vXVA0bBMLw+TS8FK2gl78SH0=
Subject key identifier: 4D:EA:94:3B:3F:B1:6D:D6:8E:BC:09:3E:C8:13:9A:0F:FB:15:F2:A5
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 0197B7457C794A6E923AD4C86CB68FF6B208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 1158
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: Sx39Rq/8oh0G8ck0OYF7NBnLwoUvNjIAoY4sOTxr6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7c:79:4a:6e:92:3a:d4:c8:6c:b6:8f:f6:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=4dea943b3fb16dd68ebc093ec8139a0ffb15f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:7d:9a:81:05:7d:b2:cf:10:6f:5b:73:da:
2b:37:43:34:3e:c7:a8:15:68:09:ef:57:d1:2c:70:
90:e1:23:cb:37:1c:f2:ac:1f:3d:85:c9:7e:c8:78:
03:69:4a:a3:7b:35:3a:8b:0c:31:76:32:0a:15:1b:
f5:36:01:4c:f6:5d:fb:a7:75:77:b2:4b:4d:67:1a:
23:d9:e6:2f:a3:9c:2e:42:c5:4a:e3:4c:96:5f:35:
44:f7:ad:7f:48:c1:08:35:fa:41:cd:0c:1c:65:50:
37:8f:5c:4f:48:0f:fd:58:43:fd:a3:fd:3e:f2:c5:
b0:ab:16:9a:34:e7:7c:bc:f1:92:a9:fc:4e:7c:2e:
5f:15:fc:83:e0:f4:ea:96:02:0e:71:74:9d:3d:2f:
fb:a9:56:3d:26:85:0f:84:7f:c0:91:f0:a1:4d:12:
f0:8b:1e:07:a8:1e:f8:61:4d:4d:c0:fc:5c:00:62:
3f:c8:cb:38:06:3a:a5:82:98:97:2d:3f:65:c2:57:
aa:73:89:85:61:18:a0:12:06:47:4c:a8:e5:55:97:
0b:a1:db:4a:21:e2:82:fa:75:ed:44:ff:e5:63:30:
85:cd:10:81:5c:cc:35:0e:e4:6a:5f:77:99:48:56:
b7:fe:09:a3:25:05:f6:dd:0b:f8:9c:68:8a:44:4e:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:94:3B:3F:B1:6D:D6:8E:BC:09:3E:C8:13:9A:0F:FB:15:F2:A5
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:1e:09:23:c2:e7:fc:7a:ec:7f:43:91:57:8a:2f:83:13:
9c:00:f0:4b:2e:eb:a9:ff:03:de:d5:b3:ad:27:28:48:2f:bf:
3b:e2:d1:69:96:3c:93:1d:bf:0d:be:60:30:60:5e:3e:75:79:
7d:8e:b4:a1:ee:3b:4b:fb:17:9f:aa:fe:ed:8a:ee:f7:ec:14:
2c:0e:04:1b:6e:be:d3:c3:25:fc:22:47:c9:f8:a2:2e:68:e1:
de:b0:81:9d:7e:68:70:8c:2e:02:03:c1:0a:27:9f:73:1e:7e:
ae:21:76:bf:ac:76:2d:57:45:3b:58:1f:f4:2d:59:01:cf:53:
b3:0d:42:86:30:c7:44:10:c5:e5:b0:4f:00:74:fe:83:56:45:
f8:3a:7a:37:f7:0c:86:92:b4:ab:93:b3:14:3a:92:a2:b4:96:
4f:76:75:98:46:11:13:fb:87:a0:6b:53:0f:bd:85:c2:55:3f:
20:b2:17:62:ae:d3:32:4a:46:a4:d5:5f:d0:70:ca:e8:78:6d:
3c:06:1f:1b:60:2e:72:03:12:92:d6:5a:a3:70:24:df:c9:9e:
5f:11:59:33:03:50:e3:62:c7:32:cd:03:05:db:e9:fa:cf:44:
7a:98:d6:c2:df:ec:0a:8b:ae:b6:4b:15:48:72:2a:d9:c8:42:
4e:e2:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:10 2025 by rpki-client