Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: XJd+Uxi2Duyk88h5CE05ZGSbp23UfpwRNslF28VsqVc=
Subject key identifier: 10:D4:DD:B2:17:AC:A7:84:F4:A5:66:8D:BC:BF:C7:47:EC:94:66:A4
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0197C87016C1D1732E4321A3801579D8169F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 00:01:18 +0000
Manifest this update: Wed 02 Jul 2025 00:01:18 +0000
Manifest next update: Thu 03 Jul 2025 00:01:18 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: DyQ7s01W4/JN4nRgaIlXnZ69Tny1x4SrMjLkpHabjAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:16:c1:d1:73:2e:43:21:a3:80:15:79:d8:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jul 2 00:01:18 2025 GMT
Not After : Jul 3 00:01:18 2025 GMT
Subject: CN=10d4ddb217aca784f4a5668dbcbfc747ec9466a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:71:d8:ee:c8:81:f2:32:05:c0:67:ca:7a:
11:72:10:85:da:1b:8f:fe:1f:3a:d2:03:0c:68:24:
b0:99:28:a4:63:5d:d6:f3:01:70:10:1f:cd:d7:17:
61:8c:d7:45:0f:a1:6f:af:f5:df:5c:23:49:ac:2f:
e9:af:02:05:63:13:0e:f9:e2:48:60:0a:d3:b1:fd:
98:6a:64:75:38:7c:f4:3c:03:cd:9a:80:5b:5f:68:
cc:71:cf:73:e8:59:90:2f:e4:62:e3:8d:03:b8:d0:
ff:3f:a6:a2:ed:88:48:a5:10:e6:b0:8b:01:69:2c:
24:d3:09:15:42:50:cb:9c:b2:84:80:a3:c7:bc:59:
3f:a1:8c:b5:fd:3b:54:62:de:9e:fe:26:08:5e:44:
9d:1f:1b:c5:cb:2d:46:39:22:99:8e:b4:05:9f:0a:
6b:2a:87:3e:5b:ec:45:4d:3b:f2:51:43:3b:92:da:
b4:d3:1c:a4:ba:a4:2f:23:a6:65:1c:ae:69:97:86:
61:5c:7d:c7:ca:11:8b:a6:5b:af:9b:18:8c:a4:dc:
5e:e9:08:62:1d:13:eb:69:9c:4f:15:71:2c:68:04:
5e:89:9b:9a:b7:9e:f4:db:0a:98:e2:19:8d:3a:50:
d8:d8:d9:31:bf:64:d7:46:a1:e7:ad:c1:5f:1f:bf:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:DD:B2:17:AC:A7:84:F4:A5:66:8D:BC:BF:C7:47:EC:94:66:A4
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:06:d4:e4:5b:1f:a5:1c:38:13:59:cd:9f:bf:a0:25:e8:
bd:4e:41:7b:45:66:80:4e:85:aa:64:74:8e:15:28:7a:9a:6f:
cd:19:64:88:c1:97:55:02:4b:f8:d2:7b:5c:7b:92:9a:48:90:
fb:bc:d5:70:f5:d3:3e:49:3f:a7:96:f9:da:4e:2c:4d:31:38:
49:11:6c:ee:6d:69:2a:b0:97:1b:e4:94:d6:f6:90:d2:e6:6e:
2c:1d:dc:d9:14:c2:90:94:55:90:bb:f3:09:40:b3:ca:d1:2a:
75:7b:4d:ab:6f:e3:1c:70:9f:d5:d1:2d:bb:e1:1a:46:11:85:
9c:5f:5f:b0:c3:2c:15:ea:03:70:4a:60:8b:6e:52:0a:0b:cf:
6d:34:cb:41:05:af:2a:d6:e3:20:f9:99:6c:d2:a1:0b:d6:c5:
5c:51:6d:34:f0:95:62:a5:9b:4d:55:4a:5d:73:43:b1:8a:41:
86:55:4e:b5:bb:9d:b8:71:42:9a:78:70:5a:e0:ad:1e:f9:ca:
b1:e7:28:2a:9c:82:c7:46:96:f9:95:f3:bc:05:dd:e1:dd:24:
97:2d:6d:c0:39:d1:d3:e7:58:90:8e:bc:56:fe:73:2e:42:c6:
2a:be:dd:3e:d4:64:72:72:ff:31:70:4f:e9:31:03:2c:cf:ff:
5e:2a:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:03:38 2025 by rpki-client