Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
File: JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json)
Hash identifier: jLRBAH8quUPBv25ZYOv/S3mY+B+9p8X/NGDUe1YWCwE=
Subject key identifier: 87:DF:78:B3:99:87:E3:EC:65:99:5E:EF:C1:87:FC:71:2E:B1:CA:15
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial: 0197B77C4B8420FBACEF2CE4CEBB2C3CB6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
Manifest number: 11D8
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: 7Dych4zveyHs0pzibZ9uvQtJ2wM.roa (hash: CW7T4TaO0Ki1j/sE/BefdFndXGm6ZNbOz4E1BOqKMT8=)
2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: xPQzq+cT5nl/8ORPmHRvv0+j/6SgNQx4pGL23EzSPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4b:84:20:fb:ac:ef:2c:e4:ce:bb:2c:3c:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=87df78b39987e3ec65995eefc187fc712eb1ca15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:79:89:77:23:4c:bb:0e:58:0c:50:36:c2:
0d:e2:2b:63:54:b8:0d:ac:d4:ef:4e:1f:b8:0d:42:
4c:57:0a:2d:bd:36:44:07:27:05:ec:42:33:ca:f2:
49:50:fc:5a:7e:09:26:d7:20:98:3b:5e:55:97:8e:
c9:d3:d6:13:36:9f:4a:3b:70:56:53:75:06:7d:bb:
ff:34:41:d6:85:47:c4:2a:bb:db:9a:b1:31:16:cf:
50:d9:2d:f2:34:b6:56:14:5f:9a:a2:2b:48:ce:7a:
4a:65:19:30:fa:58:43:bf:6d:bc:d3:11:be:77:9f:
5b:5a:ea:43:a8:99:94:f8:52:8c:01:91:05:c3:bc:
f1:04:f0:4c:86:43:00:be:e0:ee:c3:0d:74:3e:7c:
62:41:d2:52:7c:f2:58:08:54:62:42:58:8f:80:ae:
c1:b0:6c:fb:bf:f6:94:2d:33:fd:75:c3:b0:dc:57:
83:68:87:11:2f:ea:b0:6d:6e:68:c5:4b:4b:c8:98:
92:af:f1:a7:48:19:ae:f9:98:df:b7:75:40:5e:36:
bf:ab:1e:81:12:ff:9a:67:32:b6:2a:d4:0e:60:0c:
b3:1c:03:e9:fe:07:e8:32:b2:6a:4e:50:0e:38:18:
3a:ac:85:1c:c7:8f:0c:d8:db:e5:61:47:36:b9:82:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:78:B3:99:87:E3:EC:65:99:5E:EF:C1:87:FC:71:2E:B1:CA:15
X509v3 Authority Key Identifier:
keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:05:66:f4:a4:82:01:4c:6d:1e:2f:aa:ab:8c:d0:73:a3:ab:
2e:37:d7:aa:83:16:09:68:ee:e9:41:bd:f4:22:bf:ea:7c:8a:
c1:68:da:02:0e:c5:93:0a:c5:36:79:a8:e7:cf:f3:e3:1c:fc:
10:72:89:b7:2f:64:b5:d5:67:5c:a2:ad:99:65:22:09:2c:f9:
f3:aa:5e:75:08:25:1f:0c:7a:25:c1:11:c7:fa:55:22:e0:83:
5b:7a:4d:4b:11:62:59:3f:1e:95:86:e3:97:7f:ee:96:63:e8:
3f:cb:19:5e:71:db:fd:3e:16:d3:37:67:c2:e2:bf:30:68:2b:
e2:0f:a6:2b:d0:2e:a1:e1:ae:51:96:de:a5:f4:a4:b3:17:87:
4d:00:52:53:f8:6a:b2:9f:9b:5b:ad:5e:52:f8:1d:40:52:86:
15:43:54:ef:b3:1f:43:bc:95:3b:92:2b:ae:08:9c:b2:8f:cc:
7c:85:d1:44:0a:1e:3d:18:4b:07:33:9e:4b:3a:63:e7:ec:ec:
b5:a5:da:bd:da:16:9e:e0:07:19:cb:ae:c0:58:74:96:4f:db:
76:b9:5c:db:45:67:c5:e4:3a:1d:b0:d7:6a:9a:94:88:3b:f7:
70:f4:bb:07:35:bb:75:4c:43:61:cf:31:06:42:94:8b:76:5c:
d9:ee:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:50 2025 by rpki-client