Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: /3wfsUJmkSca09eFqCGLCv1X9bmknYTrevJZqrARpq0=
Subject key identifier: 43:2A:0D:6E:5F:9E:FC:D9:66:86:42:55:6A:EE:BD:A9:57:BB:21:C2
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 0197B7B322C9D03E7E17121210FBA8D319AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: OtDUDrzkgTH9uEyc+oFEFyu5Zokd7cOxmRk6CENC4p4=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:22:c9:d0:3e:7e:17:12:12:10:fb:a8:d3:19:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=432a0d6e5f9efcd9668642556aeebda957bb21c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:03:5e:4c:49:88:67:cf:8c:c1:35:bc:fd:
df:46:ec:1b:b3:02:2e:cf:a4:18:b4:58:87:38:8b:
d0:04:ad:a1:a1:05:d6:ce:28:98:11:fa:43:af:14:
93:c2:92:4b:6b:14:0f:0e:b6:89:78:f1:a8:a6:33:
cf:b0:20:62:9e:5b:b6:5f:15:a3:62:53:a9:5d:f4:
d8:03:35:92:2f:31:d4:d7:02:57:3c:29:7e:ab:1e:
4c:4d:72:5d:3d:c0:79:69:37:70:29:f9:5a:30:3a:
53:51:ed:ab:01:86:3b:ae:81:0b:9f:8a:93:20:5a:
c9:ff:d8:1e:de:c8:bb:10:c2:23:13:31:49:0c:b9:
e1:4c:c0:79:f4:ae:ee:e8:df:0a:30:da:49:e5:86:
83:d4:1e:92:f1:ae:12:a9:06:51:9d:4c:ef:d8:3e:
70:ad:3f:1b:5d:38:7a:f0:b3:93:db:e8:66:ab:56:
47:eb:4b:50:bc:40:d7:6b:df:02:28:95:8b:e8:27:
8e:38:33:03:4f:5b:38:17:f6:09:1a:e6:fa:65:db:
e5:b8:3f:b9:3c:8c:e5:92:4a:09:e8:17:c4:9c:76:
0f:c9:ed:f6:6f:e2:9d:2a:c7:92:74:2c:a4:eb:95:
8c:8a:46:39:c2:a6:6d:69:24:76:14:ad:a3:16:23:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:0D:6E:5F:9E:FC:D9:66:86:42:55:6A:EE:BD:A9:57:BB:21:C2
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:d9:d3:af:f9:26:37:8e:0e:ad:e7:b7:bd:22:42:69:6a:
70:57:41:4a:24:c2:0c:85:82:84:aa:af:ea:22:59:7f:2b:0b:
ae:7d:1c:45:41:54:b2:1d:b2:69:f1:fe:81:6d:fd:45:9d:83:
db:52:e0:21:8e:8a:13:1f:75:7e:85:66:4b:0f:ea:be:aa:ad:
3c:ea:84:e2:7b:74:33:ee:89:61:d6:eb:77:19:70:a9:c5:c2:
ed:f7:1a:3d:ab:d7:7d:49:49:d0:94:27:3e:2f:3d:89:67:38:
3c:8b:7c:71:d5:c9:f5:01:a0:09:c2:2a:41:3a:02:0b:83:c5:
79:f6:f5:4f:51:5b:59:ef:00:0e:d2:53:ba:63:9c:f5:50:e6:
82:36:06:2b:73:ca:89:2b:a5:c0:56:5d:65:14:59:36:bb:2f:
8a:a2:55:d9:8e:7e:62:f3:31:e9:80:f4:d1:f4:1a:0f:96:0d:
d9:f0:ca:9a:a4:46:ca:ca:12:81:40:9a:c1:a7:dc:43:b3:67:
36:8e:c9:22:0f:f8:ef:4b:09:79:d6:28:e7:db:11:6b:1f:31:
9e:73:1b:a9:66:40:f6:e8:27:3e:48:7f:9e:c2:b0:16:37:db:
7b:fe:8c:20:0b:ad:55:07:f7:13:a3:92:99:e8:5c:ba:10:1c:
43:1d:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:47 2025 by rpki-client