Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: wQr2AbGo+VPNK3gGJIsNSr2b3/1WzlMJms0LJ4jSFtw=
Subject key identifier: B5:83:62:46:D5:F6:9F:D0:28:F6:ED:2E:14:5C:8C:8D:76:B7:6E:81
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 0197B77C705EA3D016168D8483A01D75BC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: nF2Z4jnJn4ww6yf6pP4H8EKJ+uOzE6jrNIZPmmWMqnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:70:5e:a3:d0:16:16:8d:84:83:a0:1d:75:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=b5836246d5f69fd028f6ed2e145c8c8d76b76e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:f5:4b:13:ea:24:d1:e0:0b:07:92:ba:e3:
a0:2d:94:38:ab:30:7d:06:8e:43:21:52:b6:cd:31:
b3:63:b0:72:cc:95:0b:51:a2:2c:3d:96:e2:df:01:
50:3a:80:be:c0:47:a9:08:f6:c3:d6:21:04:91:d7:
91:43:a3:67:d9:ba:71:93:b5:73:dc:53:d8:f4:34:
98:46:a7:ea:80:ad:b8:2a:e0:3b:a3:51:ae:67:62:
e0:09:9a:f9:06:e4:f8:81:57:73:67:b3:61:f9:7e:
cb:fd:52:eb:44:c4:bd:33:50:31:a9:8d:0a:44:6b:
43:cd:8a:dd:17:d4:80:27:55:80:81:63:f5:94:1a:
47:cb:d0:78:81:ef:f3:ac:7e:58:9f:3d:98:50:9f:
34:ef:65:52:0e:75:5c:74:b8:e0:71:5a:f0:38:29:
ec:ab:a3:18:7c:cc:7a:d9:13:0e:b1:39:d3:03:92:
66:58:45:27:57:4b:11:3d:9a:76:f9:57:7d:b8:9f:
f9:b5:84:7f:4d:8a:bc:14:c8:85:ee:b4:99:3c:be:
e7:3a:36:df:57:a0:b7:d8:e8:07:95:21:57:7e:37:
15:7c:9c:94:ee:09:2e:1e:63:1d:e6:18:0f:91:03:
6e:d4:89:7f:26:a8:5f:8c:33:9f:d8:f8:a2:84:d2:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:62:46:D5:F6:9F:D0:28:F6:ED:2E:14:5C:8C:8D:76:B7:6E:81
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:76:6e:21:4c:aa:d1:6c:d2:c4:80:5a:0f:3c:0e:12:9e:
77:3f:49:5e:07:66:85:8a:9b:df:d8:d3:d3:91:37:24:b2:5b:
0f:77:b3:a6:f6:ef:dd:0c:ad:42:96:a3:fd:bf:88:ec:ec:56:
65:c7:e3:9f:b8:bb:b7:bf:b2:c0:22:e8:c9:da:cc:85:4c:9f:
2c:51:a0:cb:8d:05:ed:6a:33:f0:46:56:90:72:7d:c6:a6:e3:
d4:bd:ac:be:e9:f6:37:b8:52:3f:33:e9:93:31:fd:3f:0c:2c:
8f:8b:02:9f:4c:c7:10:12:c3:25:6e:0c:17:63:54:8e:e7:99:
40:89:88:86:e1:65:5e:5b:a6:15:63:ab:74:64:13:2d:e2:e6:
13:9d:82:aa:e1:83:d2:6c:4e:d8:14:53:9b:4c:0d:fe:80:21:
30:f4:86:d9:d5:d2:6d:5f:e8:ae:75:db:72:31:a7:7f:7a:2c:
00:04:bb:6f:e8:81:78:fc:21:ec:46:6a:83:e8:f0:21:dc:50:
40:ab:03:96:08:e2:a9:ef:ed:b9:25:ab:f7:23:90:be:6c:96:
c8:5d:5d:68:aa:30:b6:ef:3f:6c:72:0f:09:25:c5:15:fe:8a:
d4:79:bd:eb:02:a5:ab:e4:7b:d1:9c:2c:96:4b:c5:91:81:a9:
f7:a9:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:34 2025 by rpki-client