Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: k2ZClm/Q/2kU+8D8m4Zw+zAu9oa3m5Wsv/sO8J/CzSE=
Subject key identifier: 1F:6C:86:47:6E:EC:32:7A:AB:14:96:30:7C:BF:5D:FE:DF:ED:00:38
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 0197B857AFACB4130A7EDB66587168AC501F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1482
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
2: RQvFwPyBVAELy1TU_YFm3UJenmE.roa (hash: LzZxpUC6I1GH1bpp8UofG4oZYb3QFGgu/BwVtxYx/Xk=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: 5ONKqxYpQlJ5rDTinvMwSbpaZAnP1lhU0/nBMZ+3OFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:af:ac:b4:13:0a:7e:db:66:58:71:68:ac:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=1f6c86476eec327aab1496307cbf5dfedfed0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:02:cd:e1:18:5e:02:59:29:8b:0d:5c:4d:
89:0c:da:29:c8:6c:d1:63:4d:38:1a:a7:d9:36:a9:
8c:95:bf:68:6e:58:57:67:37:50:8f:38:28:9e:4b:
c3:fa:48:94:53:4e:08:b3:13:0a:6e:91:d8:9f:bb:
2c:81:a3:1a:75:05:46:9c:f4:42:08:c5:d1:0d:6f:
be:b6:2a:75:09:c3:80:67:bb:9d:46:20:0b:75:71:
ef:59:ab:80:4a:3e:6f:d8:fc:ef:76:da:59:72:b0:
d1:cf:92:97:c9:0e:35:d6:3e:2c:82:24:c4:38:3f:
ad:8a:a2:7a:fa:1b:2e:fe:e0:35:27:e5:f0:95:22:
46:a4:85:73:15:01:45:a6:5e:90:58:e2:07:74:de:
ba:ab:7e:4d:2b:d4:40:80:a5:b1:ea:38:53:fb:84:
f8:36:fa:a8:e5:f9:be:eb:f3:17:52:70:30:87:b7:
c0:9a:d6:bd:6b:8f:d7:ff:ea:aa:17:ac:05:c1:4a:
9d:88:84:9d:37:07:7c:c9:8a:0a:9f:53:04:83:27:
c3:1c:db:73:f7:55:92:4f:b6:9e:e6:57:07:ba:76:
e6:ba:26:db:95:2a:70:01:85:b0:6f:27:2f:b5:cc:
3f:48:92:c1:35:31:cc:60:96:f1:76:e9:2a:3e:78:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:86:47:6E:EC:32:7A:AB:14:96:30:7C:BF:5D:FE:DF:ED:00:38
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:89:8a:91:4a:ba:c0:4f:c3:ca:10:83:91:fb:ea:cd:3e:
e9:e1:c6:ae:7a:69:d5:8c:aa:7e:86:2b:67:21:a6:7f:ff:16:
de:65:d2:2e:fa:ee:93:52:a6:c2:20:34:e5:19:7f:d6:cc:94:
bc:84:59:f2:6b:43:7e:b2:62:32:02:f9:d0:c5:60:93:87:d3:
95:10:e6:a9:cc:5d:9c:c0:0f:7b:4b:86:9b:cc:5a:86:54:b5:
81:85:4f:66:95:98:28:fc:05:30:16:c2:62:ce:ef:87:0d:88:
6a:23:92:3d:0a:fa:d6:c0:9b:df:19:cc:e6:dd:c4:8e:83:99:
03:56:9d:d1:21:a9:fe:9b:ee:f0:14:20:d4:cc:f3:98:79:d9:
74:15:ee:fa:2a:be:bc:d4:57:dc:08:fe:93:a6:c5:49:4f:19:
c1:9f:2b:8b:f5:36:4c:c5:fd:0b:e4:0c:2f:b7:a8:ab:9d:17:
50:03:92:f9:7f:da:d4:76:69:11:e8:e4:aa:66:06:29:a8:43:
0b:88:cf:2a:dc:80:91:25:ca:56:05:25:de:ef:5c:89:e4:42:
41:f6:21:b5:e4:8b:ef:cb:01:73:4f:bc:82:ca:39:c3:12:c4:
92:fd:fc:2a:b3:d0:1c:8b:6f:90:95:67:d4:8a:d8:da:35:c8:
08:8e:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:46 2025 by rpki-client