Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: 0ytKqyqV0D7Hbku3htcDRu90qeaOSs/OKn/oclw97CE=
Subject key identifier: 11:54:31:83:34:FC:C6:DD:0C:99:F2:DE:12:16:B0:5E:1D:17:82:87
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 0197C614FB77EF9289408D40102256A99DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 13:02:33 +0000
Manifest this update: Tue 01 Jul 2025 13:02:33 +0000
Manifest next update: Wed 02 Jul 2025 13:02:33 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: t7KUQeyTBdqFBU3OGFh4xbfbvKA9/Z5rNwNcpf1Lai8=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:fb:77:ef:92:89:40:8d:40:10:22:56:a9:9d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Jul 1 13:02:33 2025 GMT
Not After : Jul 2 13:02:33 2025 GMT
Subject: CN=1154318334fcc6dd0c99f2de1216b05e1d178287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:ad:65:31:4c:63:9d:21:e8:c8:2e:38:9d:
3a:f0:45:92:07:12:9b:9c:ea:47:91:98:94:1b:d5:
95:df:ff:12:98:87:7e:a5:ae:77:c7:cd:45:2c:66:
ff:6f:aa:64:b7:a0:cd:2b:1c:6a:b1:49:73:4e:16:
a6:d3:4c:db:c0:49:15:a6:22:a7:95:8c:d9:73:ee:
f0:2b:91:dc:b5:e6:68:22:d3:08:e2:38:f7:77:05:
24:2e:bf:14:eb:b3:1e:b2:0f:02:63:02:d1:99:aa:
88:ea:ea:e7:c7:23:6d:58:38:51:db:99:2d:9e:c8:
af:da:c7:db:2b:4f:9f:98:e1:9b:fb:5a:3b:e2:ee:
b1:9e:46:f1:b2:26:5f:97:93:b9:90:59:ed:5e:39:
10:d5:22:bd:47:e5:e6:7b:c8:6a:61:b1:fa:d9:6e:
ee:08:cb:d3:a6:80:c9:7f:32:e0:6c:56:58:93:3c:
64:49:16:97:6b:77:8f:52:4a:80:5b:1c:d7:de:98:
2f:38:07:d4:47:77:4b:ef:36:35:96:5f:83:c8:e3:
d7:41:2d:94:0d:ef:0f:c8:03:a1:3f:10:57:0a:cf:
32:37:6e:bb:1e:c4:f7:10:5f:50:da:df:1e:c0:29:
95:d4:e1:90:56:6b:a1:33:90:0a:f4:82:02:04:6e:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:31:83:34:FC:C6:DD:0C:99:F2:DE:12:16:B0:5E:1D:17:82:87
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:08:f3:62:10:2c:dc:8d:6e:0f:3e:ee:85:cc:a4:d9:cb:49:
55:26:dd:2c:ab:9e:19:51:c6:cc:55:cc:c1:fc:64:e7:6a:96:
a3:af:d4:d2:24:8c:ca:10:50:dc:42:ca:06:03:4b:48:33:95:
38:04:d6:49:7d:94:8e:20:f1:7a:48:56:a3:bf:35:24:8c:c4:
f9:22:29:2a:63:4c:d2:2e:5c:fa:e4:bb:73:cf:92:dc:ed:a4:
22:58:d9:c0:8e:2e:da:58:da:cd:06:fb:7f:46:71:86:c0:7d:
33:ec:16:b1:de:6b:e7:f3:e7:aa:e7:81:a3:2b:88:22:21:a0:
a6:b9:20:ce:23:f2:11:93:ad:1a:ad:1c:0d:42:24:c7:50:4e:
80:4f:11:b3:bd:c2:2a:d4:ad:06:cc:7e:95:59:25:53:c6:79:
34:3c:f4:a9:f0:06:d2:63:e6:0d:cd:7e:c0:01:9a:a7:3c:06:
88:b0:3c:fe:9b:cb:b2:ff:25:2b:39:5b:40:28:a6:33:a7:72:
61:94:cf:ca:a4:48:d0:5f:68:64:44:f8:9c:53:cc:af:3c:54:
eb:64:6e:96:1b:e2:fa:b7:74:be:4a:7e:22:bc:1c:61:cc:0b:
a3:56:4c:12:db:8c:dc:b5:5c:7d:77:b6:a3:8b:75:c5:a1:07:
9e:4a:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:23:53 2025 by rpki-client