Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: rzog97jHcq9hjrsdszILjPb5Hn8/74DNmZWdqSkeYg0=
Subject key identifier: EE:65:63:92:4D:C8:BA:BC:95:DB:F1:8A:FD:D2:86:F9:A5:E2:FC:8E
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 0197BC6CE48DAB76AB22CE7EA93937CEF6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 16:02:22 +0000
Manifest this update: Sun 29 Jun 2025 16:02:22 +0000
Manifest next update: Mon 30 Jun 2025 16:02:22 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: DxexQmSiPdN3+U6BQ/FGokQjPZYpJp6lfwdBbDtiV8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6c:e4:8d:ab:76:ab:22:ce:7e:a9:39:37:ce:f6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jun 29 16:02:22 2025 GMT
Not After : Jun 30 16:02:22 2025 GMT
Subject: CN=ee6563924dc8babc95dbf18afdd286f9a5e2fc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:cd:26:e1:46:65:02:63:d3:33:3f:2b:1e:
ab:f8:82:f3:f6:12:19:ab:e4:2e:48:b9:49:4d:85:
80:a4:1a:d9:6f:94:94:92:30:37:88:26:51:f9:a7:
92:b4:41:47:4d:63:af:67:7f:bd:a9:c0:58:93:52:
9d:08:54:af:e9:d2:9c:57:60:24:6f:dd:74:6b:cc:
50:9a:6d:b6:ad:57:3d:cf:6d:29:39:e7:2d:49:c2:
41:2b:22:75:13:6c:86:67:a5:91:77:9b:60:71:3b:
3d:ff:ad:e3:de:48:6e:cb:83:36:f1:a5:75:38:6c:
c1:dc:3f:39:da:1d:dc:1e:47:6b:7a:3a:18:54:f4:
f8:e7:f8:2c:46:81:96:ab:2e:86:cb:8a:e3:0e:74:
1c:90:4b:3a:c1:62:a7:c3:db:03:8b:f0:65:52:b0:
c5:65:f1:45:b7:3c:8e:4c:89:4e:da:2b:0f:71:28:
eb:dc:84:16:98:78:5f:64:aa:42:38:d9:60:cd:60:
9e:71:d1:a9:98:2f:1b:ea:37:8a:6f:d6:a8:fb:6e:
34:d2:20:98:a7:bb:a6:4f:07:01:d4:65:93:6a:01:
5d:a7:b2:c2:db:2a:19:f2:38:86:84:e9:3a:36:5f:
cf:85:e9:05:71:de:78:75:a5:39:06:42:55:c6:a5:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:63:92:4D:C8:BA:BC:95:DB:F1:8A:FD:D2:86:F9:A5:E2:FC:8E
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:47:99:3a:93:b0:1a:68:1b:f0:13:40:4c:78:6f:00:ed:f4:
64:2c:31:41:55:46:8a:11:ea:3c:f0:27:7f:71:73:6f:f7:65:
49:02:63:33:b8:09:f1:86:d4:a1:4b:3f:9e:59:85:91:d1:ad:
34:b9:ed:b9:d4:c0:0c:15:f1:44:51:7b:c2:6c:67:1e:ff:66:
dc:fd:5f:c9:dc:89:57:71:2c:62:e4:69:2b:bd:0b:a4:57:6e:
13:68:16:98:6b:28:d9:17:9f:8a:a7:d0:ce:4d:64:3f:65:4f:
13:98:f9:37:38:24:86:79:08:96:4c:a6:18:fb:26:87:2e:99:
c1:be:0f:46:e9:82:98:47:10:7d:2b:9e:a1:18:d4:a6:93:9f:
c6:f7:af:b1:b3:ee:93:81:b3:94:93:b7:20:8b:04:9c:a0:58:
7e:3e:12:f0:4a:43:e4:97:2b:44:83:29:24:c0:72:01:2b:d4:
95:6b:6d:ea:d1:8d:30:dd:78:57:cd:4e:9b:3e:69:0f:5d:b2:
9c:cd:c5:89:07:95:ad:62:2a:0f:d5:a2:f7:cf:60:d7:51:48:
83:44:39:92:1f:5b:62:49:f1:64:74:23:c0:db:be:df:e7:a9:
e3:14:1b:13:20:43:f2:41:b7:48:fa:42:34:a6:9b:c1:22:33:
19:4c:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:06:08 2025 by rpki-client