Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: joQzqvg0bqgP0XO43yqulswZaswUMRbxBVhDybVurLA=
Subject key identifier: D2:97:94:C3:A2:4E:07:BF:82:35:58:F9:09:FA:C0:53:C7:8A:5B:71
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0197B6A1C88315F547F82DE624BE1A3D5E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: txjMP/nmuQjYjV9XeWoWGxEA0Ad1WpK/i+K2F9RZX3w=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c8:83:15:f5:47:f8:2d:e6:24:be:1a:3d:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=d29794c3a24e07bf823558f909fac053c78a5b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:68:a9:e8:b9:f9:72:ca:6b:10:71:bf:a7:
89:f9:bf:05:34:d0:1d:c3:3d:9f:d7:47:10:c8:13:
c9:f6:68:78:6c:53:e2:ab:cf:ef:89:49:6c:cd:57:
27:ec:0a:0e:c2:82:9d:ed:81:73:5b:d6:94:6b:96:
a5:70:16:50:49:69:c5:ea:25:f1:3d:40:94:3b:b1:
44:0a:54:51:5f:8c:a5:ad:23:38:83:81:50:dd:b4:
66:d5:3c:26:46:fc:9f:91:29:fc:c6:07:b2:5d:ea:
e4:84:77:47:d6:07:be:f5:75:d3:61:0f:97:39:11:
f7:e3:4b:ee:0d:54:a5:e0:a6:2a:a7:fe:0f:6f:f1:
db:73:28:ec:22:42:69:8b:f2:b1:c4:45:e5:30:31:
f7:21:12:4c:f5:5a:10:93:f0:6b:36:6c:55:b8:a2:
2d:6b:a3:5e:a7:38:db:d4:eb:ec:d6:3f:27:35:ec:
87:70:80:48:45:7b:8b:f7:f7:32:c6:85:5e:20:cc:
24:7a:12:4b:72:6c:ba:00:c4:f4:5f:6c:f9:77:bd:
78:3b:c7:49:45:d2:40:40:fe:46:23:3c:7e:71:39:
94:6c:fa:9f:aa:04:45:a8:4f:33:70:3f:29:8e:7e:
c3:27:fc:cf:01:9b:d4:3e:ca:ab:45:77:cf:a4:ed:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:94:C3:A2:4E:07:BF:82:35:58:F9:09:FA:C0:53:C7:8A:5B:71
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:98:47:7e:62:96:52:c1:54:f1:d2:3b:a7:e4:b3:55:43:
69:f7:ba:13:ea:85:7f:c6:d4:af:f3:f4:68:ba:45:33:3f:70:
10:09:3f:36:6a:5f:67:02:a9:90:35:c4:4d:d2:3e:f2:60:23:
ca:5a:f9:51:2d:54:fe:d6:04:d4:f2:61:57:27:20:7b:9d:82:
30:5b:b1:94:15:87:74:a5:14:e4:e1:89:05:d7:f8:9e:f0:ff:
d1:c2:9e:c7:98:bf:12:34:fa:2c:0b:0d:4c:50:33:e2:09:80:
7f:81:2a:a7:48:a5:31:0f:9a:c2:ee:74:c9:7d:f7:cc:c8:d5:
7b:b2:4f:d2:2d:86:45:9d:c0:67:d6:15:91:79:60:01:c9:de:
b8:5e:cf:fc:ac:56:c7:4f:b7:cd:7e:bd:82:f6:93:fa:19:de:
07:c4:64:c2:23:6c:9a:16:cf:39:7d:be:55:9c:e8:2f:e2:6b:
1b:3f:fb:7f:b6:2d:53:cf:dd:1c:f9:d4:39:6c:4e:c3:55:62:
a4:f7:a8:a6:c7:46:71:b8:d8:70:f6:94:1f:6f:b6:8b:11:98:
f7:32:32:14:f9:05:95:b8:2a:44:53:ff:30:bf:ba:fe:43:86:
77:28:ff:c4:79:77:e6:a2:89:95:ce:34:ae:a5:30:f2:6c:6a:
b1:0b:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:07 2025 by rpki-client