Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: oZ+RDTHiBe6fF9wX3g795i0u3kBkuZRquX5wl2zrILI=
Subject key identifier: A1:7D:28:7B:0F:1D:3B:15:B5:E9:0E:BA:5F:BB:28:F1:41:DC:25:0F
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 0197C4CA04314738ED59DCA0EB3FC04D43E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0927
Signing time: Tue 01 Jul 2025 07:01:03 +0000
Manifest this update: Tue 01 Jul 2025 07:01:03 +0000
Manifest next update: Wed 02 Jul 2025 07:01:03 +0000
Files and hashes: 1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: kXvaaWzO9Bulxl6zCpgI28yWXIwwlFiz0klpUDOuVic=)
4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:04:31:47:38:ed:59:dc:a0:eb:3f:c0:4d:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Jul 1 07:01:03 2025 GMT
Not After : Jul 2 07:01:03 2025 GMT
Subject: CN=a17d287b0f1d3b15b5e90eba5fbb28f141dc250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f1:82:20:54:db:77:98:ea:3a:7e:71:ae:16:
45:c8:2e:72:1c:83:a4:2b:7f:fa:a3:75:58:c6:00:
d0:65:a9:73:99:9d:4d:bf:ac:d3:8e:4f:99:fa:b3:
fd:97:f6:81:ee:a5:d2:07:34:da:14:01:2c:82:c1:
de:f0:a3:5b:3a:24:d2:a4:3f:3c:d9:2d:8d:c0:58:
c1:66:7e:2c:7e:a1:28:35:78:c0:8c:e2:37:fa:52:
fd:a4:24:78:64:ab:ac:48:52:64:20:2c:48:fa:c8:
34:d4:2c:5c:d7:67:c6:a1:94:fd:b6:0e:42:f9:4b:
a7:15:b3:3f:5e:e4:60:70:df:00:ea:3f:6d:36:96:
2a:58:51:5c:fd:89:83:5a:0f:55:80:2d:a1:cb:43:
59:a6:55:98:7b:5c:1d:5f:7e:f6:f8:fb:1c:11:01:
11:ba:c8:2b:a8:19:80:75:60:89:6c:9c:38:84:01:
3c:10:68:91:4d:0f:5a:d5:4e:48:d7:a6:54:1f:58:
1c:f3:ab:05:c3:f9:09:48:d9:e2:5d:89:14:c3:3c:
1e:8e:6e:d0:b2:92:50:f7:0a:23:57:60:fe:ad:38:
62:a0:99:0e:25:db:b0:34:f8:6f:de:58:78:b3:05:
6e:2f:91:08:e4:5c:bf:c5:fe:97:46:06:99:07:67:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:28:7B:0F:1D:3B:15:B5:E9:0E:BA:5F:BB:28:F1:41:DC:25:0F
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:5b:1e:45:e6:ae:31:b1:b9:63:95:d9:7f:6a:67:a4:54:
28:c2:6e:25:3f:8e:7f:a6:77:1f:0d:1f:01:3d:54:28:42:dc:
1a:be:1d:d4:8b:12:40:3a:56:18:45:66:d5:8c:22:72:f1:c4:
5c:23:85:1e:06:95:6f:3f:30:02:01:a9:9b:15:96:ee:cc:ac:
d5:8d:47:40:77:79:79:ad:2a:f3:d2:34:f3:83:29:d9:89:91:
79:46:02:53:70:a0:e5:24:34:40:ed:31:b3:ba:f3:f5:85:ab:
57:16:59:ab:0c:71:a6:9d:d0:73:56:72:1c:2f:c9:92:91:77:
23:1d:fb:3c:21:0f:21:c5:7e:67:2d:ed:5b:bb:ba:8a:e6:f4:
cf:b9:76:bf:2e:1f:96:8b:8e:8b:94:74:cb:2d:1e:9f:9b:0f:
38:69:60:88:5e:c2:3f:77:1d:71:fd:17:52:4c:7a:57:fd:a5:
47:fc:d1:cc:3f:b3:88:75:1b:e5:e1:88:96:7d:98:f2:84:12:
8c:53:1b:d6:33:be:e7:b6:ae:f1:25:06:d2:20:9a:4e:61:30:
8f:c4:e1:87:d1:c1:ce:af:5e:e4:66:e1:31:a9:1f:98:04:78:
7c:cf:72:a8:c1:6e:f2:dc:0a:97:15:f0:2a:3e:48:1f:fc:db:
65:59:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:48:30 2025 by rpki-client