Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: uhYxl/6lCU+K/Of+1th2nFYVp/cxyGOPZHusQqm82x8=
Subject key identifier: 7F:34:42:94:01:D9:4A:E4:92:81:09:45:9D:30:A3:52:7A:4E:50:47
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 0197CE03DA2F8BAE42E6BCAF32CA9639D89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 15A7
Signing time: Thu 03 Jul 2025 02:00:48 +0000
Manifest this update: Thu 03 Jul 2025 02:00:48 +0000
Manifest next update: Fri 04 Jul 2025 02:00:48 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: JLObH/21xS4GPmL+mFGUAw8CcRXvTmH+h5YkzbQZiDs=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:03:da:2f:8b:ae:42:e6:bc:af:32:ca:96:39:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jul 3 02:00:48 2025 GMT
Not After : Jul 4 02:00:48 2025 GMT
Subject: CN=7f34429401d94ae4928109459d30a3527a4e5047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:3b:3d:c6:72:db:d1:af:f7:4f:76:02:a8:
e3:df:a8:32:f1:16:91:4c:1c:55:e4:53:1a:89:84:
14:c8:69:86:6c:31:6e:a2:ba:75:13:81:15:c0:60:
d3:72:53:1a:55:b4:80:c4:9e:5b:dc:91:c1:27:0c:
28:1d:38:38:d4:21:a3:8a:2b:f9:8b:65:db:aa:ea:
df:4c:43:50:c9:ab:12:b8:f1:a9:a6:a3:e7:99:b1:
00:44:4f:f1:eb:e2:3d:c4:a7:02:c5:45:9f:86:fa:
df:a7:6c:0f:8d:8e:e4:f6:ae:ec:96:b5:82:26:b4:
9b:8f:18:11:4d:e4:d7:8b:58:3a:7b:bf:66:e2:c2:
a9:fa:d0:e3:fe:79:f7:13:e3:98:7d:d0:84:34:b5:
bd:7a:91:f2:8a:fc:51:e8:f3:cb:e0:46:16:2d:59:
c6:14:42:ee:59:e5:a0:88:69:af:9c:d5:50:46:21:
11:07:3e:d3:f7:20:16:cb:31:e7:d6:6a:90:0f:d4:
a6:9d:35:97:08:01:22:6f:f2:04:da:da:fa:5a:3e:
e7:ee:9b:0a:07:e5:10:ea:42:41:eb:57:10:b8:79:
52:54:ed:b7:bf:99:2f:88:6f:14:1e:27:be:76:68:
3c:05:d1:9f:7c:38:97:50:22:03:11:bb:3d:9e:dd:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:42:94:01:D9:4A:E4:92:81:09:45:9D:30:A3:52:7A:4E:50:47
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:92:08:66:1c:eb:cd:70:11:1c:05:64:83:88:b0:e6:e2:
cb:c6:38:bb:80:e0:04:36:a7:0a:5d:d1:1f:38:bf:ae:49:d6:
b8:4b:35:ac:94:00:3d:4c:f7:19:2f:62:8e:73:b9:6c:2c:76:
42:5a:29:c1:87:43:79:fd:5a:ac:41:a3:d2:73:6d:4f:fb:75:
8e:3c:6a:1b:15:30:79:d1:7c:e5:4b:47:2e:fe:bd:e9:5a:4f:
e6:8a:e9:49:6d:17:06:f7:0a:f5:49:96:34:39:71:45:46:a2:
6d:cb:7e:ea:31:2a:34:fe:63:60:15:f8:0a:04:ff:ec:9f:c5:
72:89:ec:ec:c9:32:dc:b4:10:2b:30:ea:a9:b8:46:4b:6e:5d:
61:e1:aa:56:e7:3c:7c:b4:c6:48:4d:bc:f2:10:6c:27:a0:92:
bf:c7:d0:dd:ed:91:66:90:90:80:94:50:b4:32:73:1e:2d:8c:
b0:2b:4b:d2:f5:16:83:6e:53:48:94:78:bd:68:b4:18:8d:de:
6c:ee:2d:a2:af:fd:13:eb:f7:91:0e:64:30:cf:c1:68:83:31:
b2:d9:34:4c:96:76:a1:fc:e0:ec:c0:de:7e:69:02:5a:fa:67:
fc:6d:aa:5e:54:ae:f8:4a:7b:b8:02:03:5d:51:6c:e4:3d:62:
9d:b0:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:27:54 2025 by rpki-client