Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: Qk/Zhkt6X7BhPpjihWhIKe+BUOhJVASO6LlbhzVc9yM=
Subject key identifier: BD:B6:BA:95:70:A2:D1:9D:A5:E8:85:36:EF:74:63:82:B5:27:67:55
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 0197B821507C14A97986B1BB262B0D46D6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 12E7
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: jiSMZIhRgGtWJQmdaOVDqDG7lwlNgD+fwc9TCxiYj+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:50:7c:14:a9:79:86:b1:bb:26:2b:0d:46:d6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=bdb6ba9570a2d19da5e88536ef746382b5276755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:78:89:97:22:18:42:2d:cf:51:de:76:2a:
80:86:90:59:7e:3d:58:c9:5b:e5:7a:46:9a:41:c6:
8e:2c:83:1e:9b:be:37:15:54:46:e5:70:95:88:3e:
b7:d0:cb:66:35:9f:24:71:31:d8:ae:d9:02:af:76:
52:72:30:dd:75:83:1b:57:1d:81:08:cd:f7:3b:31:
49:77:8a:7e:5a:4b:71:00:61:ac:df:86:b4:02:db:
8e:27:89:c2:d7:d1:ca:bf:88:eb:3b:e2:91:fa:fe:
73:8c:8c:76:c4:80:30:07:b3:46:ef:50:49:54:d2:
6a:24:e4:90:98:72:ec:ad:8b:50:97:0b:75:c2:94:
40:de:8e:5f:1c:8a:2f:a4:dd:8e:a7:c2:22:b1:e3:
11:d9:43:6a:f2:f4:12:90:d7:5a:29:fa:cb:3a:2a:
f2:a4:a7:20:77:2c:e5:65:02:90:09:f1:b9:2d:25:
42:80:58:22:01:f0:6f:3f:06:98:af:40:f4:1b:06:
d7:68:4f:52:82:fa:ff:2a:c4:54:9d:58:7e:ec:93:
c9:11:cd:dc:08:09:36:0d:fb:7e:b7:ce:71:d4:0d:
f0:c0:c2:92:8b:ac:b1:55:67:75:b8:67:e6:c9:27:
4b:a6:34:2f:f7:0c:75:d1:5b:f4:48:8d:cd:66:5a:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:BA:95:70:A2:D1:9D:A5:E8:85:36:EF:74:63:82:B5:27:67:55
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:98:f5:e3:f7:63:35:07:ec:bb:a4:d1:37:da:0e:9c:e2:
2a:f0:d0:6d:8e:c1:9b:41:f8:48:5e:33:30:3c:19:49:4f:f7:
6d:ec:1e:80:90:b8:09:c7:b0:1e:30:11:9f:0a:98:d5:1f:69:
36:f8:61:47:2f:4c:03:8d:15:57:75:3f:73:06:18:ce:e9:2f:
3c:0a:e8:07:bc:79:99:45:e1:d8:5a:06:b5:80:a0:75:87:ce:
f7:f0:1c:31:23:a6:f3:9c:9f:ec:d0:07:52:1b:2f:06:fd:e3:
ac:d4:57:5c:d2:30:ef:07:63:b7:63:58:8d:2f:4a:10:d7:6e:
09:cc:c5:d0:1a:2b:4a:33:34:26:71:5a:b0:ab:67:15:a5:f8:
ff:85:b2:fa:fc:e8:d9:95:c0:ab:f2:98:5e:9f:25:ed:84:5d:
08:54:dc:7c:07:62:8a:7b:da:db:a1:ae:46:16:49:56:4c:14:
3e:b7:07:d4:9e:66:4c:f0:fc:47:dd:8e:29:75:4b:24:69:53:
89:6f:da:57:cf:2a:aa:5f:97:f8:cb:31:82:11:0e:d4:a1:51:
90:c5:c8:8a:25:2f:f9:24:1d:f7:7c:4d:4f:0f:0d:c9:ae:e8:
e2:73:77:a0:ed:45:25:7f:3c:c7:1e:a5:9a:96:d6:c6:80:00:
be:0c:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:20 2025 by rpki-client