Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: nHmqSpBys+SLGynO32DGIKXnuAbMhYUGymuh4fH1TRg=
Subject key identifier: EB:9E:83:37:DD:AA:92:B0:06:3D:ED:B9:16:DC:DE:1D:D5:C5:CC:1E
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0197BEFEB0776268A8FCC9B48267AAFB0B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 161D
Signing time: Mon 30 Jun 2025 04:00:51 +0000
Manifest this update: Mon 30 Jun 2025 04:00:51 +0000
Manifest next update: Tue 01 Jul 2025 04:00:51 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: QwywyTrSV42IwS2p+/MzSf8YXrmEsZF/OkoqZXladyI=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:fe:b0:77:62:68:a8:fc:c9:b4:82:67:aa:fb:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Jun 30 04:00:51 2025 GMT
Not After : Jul 1 04:00:51 2025 GMT
Subject: CN=eb9e8337ddaa92b0063dedb916dcde1dd5c5cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:97:e0:ee:06:28:c3:42:e3:96:2c:14:4c:
2d:cc:87:0a:db:e8:76:75:7c:8a:17:ea:25:10:ff:
da:6c:4f:b0:6f:0d:d6:ef:3b:8c:33:32:46:d5:86:
52:02:1a:b3:7a:42:9b:bc:0d:0a:e4:d6:a1:01:a4:
7f:ba:2c:7b:d0:ea:34:55:54:18:19:f4:a6:97:9b:
be:14:88:65:a5:c6:e0:d6:8f:fa:9a:08:98:3d:8a:
e0:1c:9d:b6:48:1f:a1:7f:1e:30:f9:ae:90:ce:cc:
8f:c1:99:6c:e6:a8:04:7e:1a:7a:01:49:06:80:97:
57:c5:6a:61:72:56:dd:d6:49:82:7c:b5:71:ac:5c:
d3:ef:38:25:88:c6:65:3e:2e:8c:03:3f:2a:df:81:
35:46:fe:31:08:ce:da:27:fc:06:c4:f5:40:a0:97:
c7:ac:97:a4:c0:e6:77:bd:52:f4:7b:98:e1:6a:37:
cb:4e:30:6f:36:c7:f1:fe:29:ef:d8:4a:55:26:84:
7f:c9:4a:07:c3:b2:f3:13:16:ca:59:67:1c:4b:31:
5c:ba:bc:ff:7f:ff:b3:1e:7f:f7:7b:46:53:a3:5d:
fe:05:d3:2e:75:f3:9f:e1:6b:28:1a:b0:48:b3:49:
bf:db:ca:28:bb:85:2d:db:21:c7:82:72:09:5e:0c:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:83:37:DD:AA:92:B0:06:3D:ED:B9:16:DC:DE:1D:D5:C5:CC:1E
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:59:f3:f4:e6:69:13:fb:bc:72:82:98:5c:8c:93:cd:df:25:
e1:18:c5:8a:a0:61:50:15:3a:9e:b0:b6:48:ca:22:22:c9:52:
eb:d4:08:5e:9c:f7:3e:39:ae:81:cf:0a:e5:e4:81:84:fc:69:
be:cf:bf:fc:b5:43:47:19:76:f6:a2:b4:34:be:c1:17:8a:f3:
21:69:79:1a:86:3a:1a:bf:f6:72:d3:15:1c:54:ea:64:2a:e2:
99:c1:64:18:29:fb:a4:f3:90:68:5f:33:a7:e1:62:8a:d7:7a:
c8:b7:34:a6:12:e7:0d:da:c4:73:b2:bb:42:6e:37:9e:8b:81:
a1:0a:b1:36:ae:e9:c5:1f:7a:4e:33:8a:25:5b:c4:0f:3c:c2:
71:c5:34:0f:e0:72:7c:42:29:7c:d1:8b:2a:43:2d:62:32:12:
1e:5b:9e:81:34:f6:97:60:1f:2d:28:88:be:da:ed:34:02:df:
a1:53:2f:78:37:d6:39:9d:81:8e:ac:ab:b5:d3:83:8f:16:72:
db:bc:93:d9:b3:d0:b9:9b:c9:75:1d:e9:2d:11:d4:6d:1b:b6:
65:af:9c:d4:8e:11:b4:4a:f1:ca:a6:6c:1c:bb:5a:7e:81:66:
92:09:53:c2:ba:60:86:f1:c8:18:f4:5d:e1:d8:53:08:f3:84:
b6:df:53:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:19:05 2025 by rpki-client