Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: idq6eP1yWdZwng/LfsWyBeZ2KjM32Y09LoeEt9BXiyg=
Subject key identifier: 92:D6:83:15:D8:3B:0D:02:C1:1E:EE:FD:98:66:4D:68:0E:F6:6B:56
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 0197B632B1B6E2F8A03F051C23995B9DE387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1162
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: QnVqSYR3D/v8iuV3o58rlY4mekH8fQDcnw8ct72OOJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b1:b6:e2:f8:a0:3f:05:1c:23:99:5b:9d:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=92d68315d83b0d02c11eeefd98664d680ef66b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:30:a1:b7:0e:22:4e:e7:47:50:99:34:47:
77:d9:f9:b6:94:31:f3:e4:02:76:a0:09:da:a7:14:
6a:c9:23:3b:5b:ec:e6:f7:f3:bd:78:51:01:21:fe:
3f:7e:ba:64:6c:92:75:d2:1f:e7:83:bd:28:93:3e:
d5:f1:ec:f2:65:48:32:cd:8b:3e:b6:7c:70:4a:ed:
96:5d:2b:fa:a9:f6:51:09:38:9d:aa:1e:85:2c:73:
56:0e:11:47:57:e9:12:e2:56:bc:67:94:18:17:f2:
98:84:11:81:d2:3b:65:30:91:1a:d2:10:71:90:6d:
3f:01:bf:88:69:4e:d1:d8:6f:76:2f:82:a3:b6:44:
6e:af:40:03:e4:39:63:99:3e:8d:2a:32:24:76:89:
ac:79:b3:11:5e:ef:03:53:48:42:4a:b5:bc:23:1c:
09:88:bf:ae:93:9c:6c:12:ab:9d:e6:54:f8:f5:af:
a9:c7:1a:12:d5:71:37:68:59:b0:25:0c:ea:90:d9:
0c:3d:8a:7c:cf:71:9f:f1:60:46:00:01:9d:02:88:
62:60:c2:77:22:4e:da:93:59:26:5e:1c:fc:18:5f:
64:04:d7:9a:68:95:70:71:1a:d0:1f:5b:73:a1:99:
3c:ad:22:a4:6d:f8:2b:50:29:49:76:55:2d:79:71:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:83:15:D8:3B:0D:02:C1:1E:EE:FD:98:66:4D:68:0E:F6:6B:56
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:50:3c:fc:6e:a3:40:71:18:8b:a1:8d:06:18:1f:7e:4d:4b:
6f:dd:39:81:f8:e8:8d:d5:ce:6a:00:68:1b:a5:ec:ec:86:e5:
47:c7:e4:8a:43:e7:cb:06:10:65:17:74:14:b1:2b:fa:5a:2b:
9c:74:f8:d2:de:33:79:11:13:b2:b1:f6:3a:db:14:36:5b:6e:
1b:54:9c:54:59:a0:e9:f0:b5:cd:b5:e9:0a:d2:b2:38:9f:be:
4b:c3:0f:1b:b3:44:c1:e6:0a:af:43:61:6f:c1:e4:6b:08:d4:
7b:aa:6b:97:36:cc:72:a9:82:7b:24:c6:74:c1:d7:a2:8a:b2:
99:86:ff:01:20:50:18:95:28:f9:be:c9:7d:c7:e8:14:ac:0c:
28:26:3f:4e:9e:06:7b:3c:22:cc:a4:4d:fa:16:a3:f1:83:24:
60:f8:e5:e5:57:f3:da:bd:68:f3:23:d5:74:63:a0:53:cc:91:
6a:40:b9:73:7a:95:b3:7b:76:18:b3:41:89:d5:95:28:2d:13:
97:db:f8:02:e9:6f:49:9c:26:a2:32:a3:53:2d:5d:24:47:56:
73:9e:33:0f:de:cb:e6:f1:8a:af:27:6e:80:c9:5d:65:15:e8:
18:db:4d:30:75:09:31:31:14:7b:00:e3:e5:9c:fd:ac:e0:76:
32:fa:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:42 2025 by rpki-client