Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: PDOKfqlGLtoTarjc/hJOlHMvKRGQKTD33HUjinxNcnQ=
Subject key identifier: E5:D5:4A:20:89:3D:EF:55:42:6C:0F:DC:EB:67:EB:43:52:F4:66:E5
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 0197CA95782CE221F67CA4103216AE382033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 15C8
Signing time: Wed 02 Jul 2025 10:01:22 +0000
Manifest this update: Wed 02 Jul 2025 10:01:22 +0000
Manifest next update: Thu 03 Jul 2025 10:01:22 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: B6N4aDBhEvvqzxCVbXgGIUMXm4ljfOAPCgzbWgr+EBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:78:2c:e2:21:f6:7c:a4:10:32:16:ae:38:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jul 2 10:01:22 2025 GMT
Not After : Jul 3 10:01:22 2025 GMT
Subject: CN=e5d54a20893def55426c0fdceb67eb4352f466e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:fb:04:d5:46:81:8a:af:46:4d:9f:9c:12:
ce:ee:72:ef:43:23:4d:5d:f7:ef:ad:09:8a:18:c8:
04:b1:1e:b0:ed:b5:ed:94:e6:81:c8:b0:da:c9:f0:
4b:fb:89:1e:18:53:c6:b4:41:f8:c8:3b:f1:1f:e9:
a7:e8:81:f3:11:a7:f9:ed:ee:81:63:a9:22:9d:0b:
03:f5:60:75:b2:03:05:09:58:de:40:2a:1a:09:2a:
73:0a:62:37:69:ee:ba:34:e9:08:38:46:12:3e:bf:
23:37:70:bc:35:98:88:7f:ca:6f:66:0d:22:f7:f4:
56:9f:88:32:ab:2c:96:82:8c:a3:00:64:75:5b:cb:
6a:f7:59:b8:7f:49:be:b7:3a:8d:88:a5:60:55:40:
bb:67:fb:a8:80:4e:d2:00:97:9a:83:fa:07:9b:d0:
4d:27:2b:53:f4:0a:05:83:c4:fe:40:18:b7:ec:e6:
07:ea:d1:fb:4e:d3:53:21:60:ed:39:f4:31:95:08:
49:1c:37:e1:f8:59:da:f4:39:19:10:48:fe:d6:08:
89:a1:38:43:04:dc:c8:f7:a7:9a:91:10:8c:39:35:
5c:22:36:81:d8:06:c2:f3:66:03:3e:c5:52:41:4e:
2f:1d:9d:c3:3a:f1:70:63:04:4b:b4:3d:6f:e9:64:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:4A:20:89:3D:EF:55:42:6C:0F:DC:EB:67:EB:43:52:F4:66:E5
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d7:81:99:1b:2e:77:0f:66:78:a0:d0:60:17:73:63:e5:ef:
e7:42:18:15:e9:a5:d5:07:4c:0e:cb:35:7e:c1:6d:94:1e:ca:
f6:05:36:e5:11:c7:9a:f5:e1:74:fe:18:3e:08:92:09:2d:ef:
2b:56:13:81:a6:32:2e:8c:87:96:51:82:f7:7d:38:f7:1a:01:
64:91:8e:bf:e1:69:ff:d3:46:9d:2d:f7:ed:63:72:78:e2:d9:
b4:30:e9:6e:30:7e:98:08:bc:3a:42:1b:0f:a3:eb:be:cd:12:
0e:77:43:c7:6d:fb:d4:4e:ca:74:cc:0f:4f:95:16:9d:a3:62:
01:8c:f0:82:3f:8d:02:d2:9b:1e:17:77:ab:f7:c7:2e:62:7d:
76:1d:ae:89:c2:4f:98:bb:4d:35:19:2a:44:82:72:77:06:95:
ce:b8:38:c8:f1:4e:9b:55:d2:c7:b7:b4:57:78:96:73:5d:95:
fd:01:36:de:94:c6:f9:e7:ce:dd:df:14:37:f0:1b:3d:d1:1b:
0d:f8:57:99:f8:34:d5:7d:af:d4:0a:5f:2b:11:a0:a5:cb:75:
0f:6b:2e:5a:9d:71:9e:f4:5b:4a:8b:90:a0:82:67:6d:94:f5:
73:91:9b:f2:9b:39:0b:1d:6a:82:29:cb:ea:f1:c7:4d:0c:3f:
b1:cb:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:48:44 2025 by rpki-client