Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier: Q0KA3sF7UmI2zrvUF8s61ESOtvS8GxCqDrGuhm96Rm4=
Subject key identifier: 6F:EF:8E:E1:79:92:F9:FB:AD:C6:71:61:04:90:FA:3B:D9:9D:54:00
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 0197B5C4845A7C61FD6B17E3920AB7ED3BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number: 0305
Signing time: Sat 28 Jun 2025 09:00:44 +0000
Manifest this update: Sat 28 Jun 2025 09:00:44 +0000
Manifest next update: Sun 29 Jun 2025 09:00:44 +0000
Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: 5uVsJqDGF6wubYxgQLHkDxhQB1KUxA96H/Ghhvlmr+c=)
2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:84:5a:7c:61:fd:6b:17:e3:92:0a:b7:ed:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Jun 28 09:00:44 2025 GMT
Not After : Jun 29 09:00:44 2025 GMT
Subject: CN=6fef8ee17992f9fbadc671610490fa3bd99d5400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:37:87:66:f0:e4:cf:9d:94:1e:82:54:96:
84:69:97:f3:dc:14:bc:0d:7d:a4:72:4e:34:c4:d8:
93:2b:9f:b5:6a:d3:0f:73:4d:62:e8:d8:46:25:6c:
25:8e:39:95:33:26:47:49:a7:95:9e:95:61:31:c9:
d9:f8:fc:ab:4c:13:18:a7:76:f3:3b:0e:71:f5:c9:
46:2c:ef:6b:d5:93:6d:a0:c0:d9:6b:6b:20:92:17:
89:3b:a9:49:46:0a:cb:63:9c:54:13:86:67:66:6d:
3a:2a:2b:14:ad:ee:6d:99:28:3a:2c:12:5a:a4:c6:
24:d3:74:6b:cd:6c:1b:ff:66:4c:e8:01:b2:a8:67:
c9:72:a9:e8:71:b6:82:40:ce:7e:b8:3e:78:1d:99:
20:db:52:53:6e:56:8e:cd:70:48:56:37:da:73:b0:
5f:bf:bb:8a:77:2e:6e:66:55:92:6a:4d:36:7b:75:
63:51:d8:7e:3f:02:69:fa:16:ae:10:aa:7e:3a:89:
53:2f:7e:80:9f:3a:71:29:44:e2:92:9f:c5:c1:d9:
20:73:b1:9b:86:07:6d:39:1e:2f:56:07:f2:ad:4c:
66:ed:ae:1c:01:6f:60:e3:fd:e3:9c:b9:96:12:4e:
2e:40:64:96:30:ff:92:cc:a2:83:3b:31:f5:64:5e:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:8E:E1:79:92:F9:FB:AD:C6:71:61:04:90:FA:3B:D9:9D:54:00
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:11:5c:fa:ad:67:cf:ee:e9:de:3b:4c:ac:0a:87:a1:f8:
cf:3c:da:a7:3b:96:c8:8f:ee:2c:9b:be:4a:dd:51:c3:b0:9b:
06:29:e3:07:95:7f:bf:c6:d9:b1:7b:69:7a:65:00:86:38:55:
45:ac:53:c0:b5:6b:92:31:d3:37:68:2c:c0:07:68:79:88:16:
a0:6c:57:58:f1:a6:28:f6:14:4c:17:15:5f:c4:a3:ac:63:cc:
96:40:d8:c2:1e:ff:1c:37:20:e4:1a:3a:86:5a:dd:74:21:20:
84:52:ad:d4:69:c3:0b:21:10:75:9b:2f:16:4f:4a:51:e4:69:
bd:c8:a6:1f:b3:96:a8:01:2e:e6:5a:3c:b1:42:42:75:a9:14:
47:14:cc:81:6c:96:cb:45:20:d5:23:29:28:0d:46:cc:35:d4:
7c:28:3c:0b:46:17:b0:fe:c8:85:00:04:b6:60:4f:2e:10:0f:
c6:69:71:85:53:8b:7d:e1:7e:a3:b8:8a:20:f2:13:60:ad:b6:
3e:80:9b:5f:3c:8c:63:b5:72:ec:07:77:b0:d9:fa:a9:29:0d:
fe:3a:a3:5f:d8:45:1a:fa:bd:ce:70:76:16:31:61:56:07:24:
f0:ce:29:c7:11:82:32:de:1d:40:8e:c9:08:7e:98:0c:54:61:
01:64:fc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:43 2025 by rpki-client