Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: GAM+O2e7sWwMnQNy5F13qoxeDnV12NTbFRcsi9uChkM=
Subject key identifier: 84:E2:B2:07:39:DB:77:33:E8:BD:FC:33:C3:6E:F7:D5:60:35:D6:38
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 0197B88EB3FBE1047F520C180F12DDA58D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 0170
Signing time: Sat 28 Jun 2025 22:00:49 +0000
Manifest this update: Sat 28 Jun 2025 22:00:49 +0000
Manifest next update: Sun 29 Jun 2025 22:00:49 +0000
Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: lNWBSi72wJK1C08msme7ObPzw10VOx2zBdlCMzjz6ug=)
2: zXewAjWGvMnM0TC9WYL-KIwYeTc.roa (hash: lBVP9+96UyCRaPNC0pu5UG19WbXzwH4ZL/S+8Cro2UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b3:fb:e1:04:7f:52:0c:18:0f:12:dd:a5:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Jun 28 22:00:49 2025 GMT
Not After : Jun 29 22:00:49 2025 GMT
Subject: CN=84e2b20739db7733e8bdfc33c36ef7d56035d638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:29:b5:01:82:90:cb:c4:7e:09:78:ff:0f:
35:f9:48:16:52:be:ea:10:58:29:d1:d1:ab:b3:ad:
04:29:df:93:3b:ce:5b:fe:65:38:61:04:17:0a:77:
98:9c:3c:73:88:c9:a9:7a:89:33:c7:11:f1:85:bf:
cc:f6:0e:15:e5:30:f8:f2:3c:d8:09:ea:d2:47:88:
99:f6:e2:9c:6b:27:67:ed:45:6b:95:5d:f0:99:cd:
2c:9f:f8:80:4a:c4:da:a0:f1:76:28:ad:7e:15:f0:
96:fe:ca:c3:a1:82:d5:4e:50:45:29:63:6a:25:fa:
9b:98:ea:cc:49:68:f2:e1:96:64:91:2b:22:1a:06:
a6:0b:9c:ef:2b:54:dc:4f:dd:cb:ee:a4:65:99:65:
53:9d:81:ac:08:13:30:5f:c2:50:53:83:5b:27:2f:
de:73:1d:6a:e3:04:32:98:8e:cf:60:9e:fb:c5:d1:
b3:16:c5:b3:3d:14:97:b3:bb:e4:2b:73:52:e8:ce:
bb:8f:6c:0c:d5:da:9c:a6:ef:db:45:18:79:32:53:
98:55:5c:c0:68:50:21:eb:97:44:6b:4b:da:71:af:
e3:74:0c:a5:fb:50:b7:f7:65:74:1c:d7:ad:fb:4c:
bc:7f:f4:e8:53:1b:de:76:86:1c:b9:dd:c8:c6:05:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:B2:07:39:DB:77:33:E8:BD:FC:33:C3:6E:F7:D5:60:35:D6:38
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:3d:f4:eb:d5:66:28:a3:f9:ae:a0:c3:51:f5:ad:e3:b9:
fc:e3:31:1b:cb:17:c8:96:d0:0c:a7:8b:31:5f:c5:93:a3:d9:
4c:a6:f7:d4:3c:d7:f2:76:a3:d0:f8:4d:ca:48:80:45:ad:6c:
43:6e:16:28:e6:d3:2f:da:1d:7f:d3:58:78:0c:65:92:44:a8:
86:72:a4:06:54:8d:fc:57:ca:63:6f:2b:86:5a:26:b2:fb:27:
96:c4:c6:bf:43:61:e2:db:f5:4c:5c:05:39:4a:33:bc:96:47:
98:14:fa:ad:b8:bf:b9:d0:fb:eb:58:9b:71:6c:90:30:21:bc:
fd:08:b8:85:e4:c3:9e:3a:3c:d1:2b:78:26:7e:a0:f4:05:6a:
ff:06:33:5b:78:30:ec:8e:75:39:1d:42:4a:a1:25:45:12:4f:
ad:b7:0a:5b:0d:b0:03:6b:64:40:ad:30:4d:0b:c2:d0:dc:c5:
25:4c:01:9a:51:df:90:21:64:54:4b:55:63:ca:15:b1:ca:aa:
74:94:21:89:17:09:9c:eb:dd:d3:79:04:16:3f:bb:5f:1c:13:
76:d8:d5:7f:4b:24:0b:9f:6a:59:70:0d:0d:0b:bf:61:f8:b0:
a3:d9:71:8f:7c:de:6b:30:e3:06:27:cd:f1:56:d0:82:d1:21:
83:6b:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:03 2025 by rpki-client