Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: 6yIQja0kYfa9JbpUbJViQ9Ue11SWd4RDJvR6HM9Xm5w=
Subject key identifier: 4D:3D:CE:1A:95:3A:BE:FD:98:CA:5C:85:20:6B:90:29:D8:66:0B:00
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0197CC4CAD0A5574D3EB97FDB831B66967F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 15C6
Signing time: Wed 02 Jul 2025 18:01:06 +0000
Manifest this update: Wed 02 Jul 2025 18:01:06 +0000
Manifest next update: Thu 03 Jul 2025 18:01:06 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: G7X58jUFcTGY0N6DJYjDHRMaCChco1kHu5C9ucCz9pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:ad:0a:55:74:d3:eb:97:fd:b8:31:b6:69:67:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Jul 2 18:01:06 2025 GMT
Not After : Jul 3 18:01:06 2025 GMT
Subject: CN=4d3dce1a953abefd98ca5c85206b9029d8660b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:42:c9:29:19:1c:de:16:40:87:e0:60:5f:
b1:09:2b:4e:a3:ff:2e:06:d5:9c:a3:11:11:31:30:
7a:09:c8:fa:bd:fa:4b:59:e9:c9:51:19:69:08:e8:
a5:2d:ba:bc:65:62:87:7d:7b:e0:03:42:8f:28:f1:
5d:ff:45:4c:bf:7d:8a:8c:3f:a5:cf:67:ca:5b:ef:
30:7e:40:dd:89:e2:86:5c:df:c2:16:ef:7c:3e:1b:
81:54:88:10:99:48:07:14:74:42:a0:ec:03:fd:a5:
11:63:62:0d:15:69:e9:fe:f7:3b:3f:28:09:10:18:
9f:70:20:47:75:bb:03:61:7e:82:27:2c:8a:e9:e2:
e2:90:ee:b9:7e:df:ea:58:ba:93:b9:d7:5a:7d:34:
1c:f1:02:36:fd:24:63:e2:5f:c8:49:4e:d0:74:f6:
8d:de:a9:c6:c5:b1:64:34:61:90:5c:ba:f4:23:be:
20:2c:6d:d6:7b:e6:b4:07:7b:b2:f8:e3:79:df:69:
8f:40:a2:37:9b:50:4a:c7:d1:9f:63:2a:8f:44:cb:
a1:ae:8a:cb:15:38:78:61:e0:b0:5f:52:e4:d6:f6:
d1:6d:bc:64:a9:f6:8f:8d:8b:07:02:1b:4b:85:b2:
77:a7:0e:7d:76:93:38:18:13:b3:97:29:b5:e9:84:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:CE:1A:95:3A:BE:FD:98:CA:5C:85:20:6B:90:29:D8:66:0B:00
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:64:42:0e:19:b6:3f:ed:03:e8:c0:71:c3:b0:ed:9f:eb:87:
7b:cd:67:c7:6b:8e:39:6d:8d:e8:7d:3e:e3:5d:8b:1b:ff:fe:
a1:cf:58:b2:46:a3:07:b3:e3:ba:4a:51:51:60:ca:05:d8:de:
49:9d:e9:a0:9e:48:c3:ec:c4:b9:6c:da:72:1f:e3:dd:93:31:
c7:2b:c2:31:65:47:05:f5:76:84:a2:ed:53:c9:a7:2e:0f:aa:
9e:ee:b4:22:16:a4:a4:16:0d:a2:c2:e3:71:07:85:bd:11:3c:
ad:5e:9b:6d:e7:eb:d2:94:4c:5f:05:0c:1d:ce:11:bd:d2:7f:
33:10:d5:e2:b7:5a:9f:db:bd:28:b6:fb:f1:a5:2e:08:62:52:
a8:ee:d8:9f:0f:cf:ba:ef:8f:1d:46:1a:f1:62:b1:b2:b3:90:
37:b4:98:10:b2:fd:9e:68:2b:32:43:ba:6b:d2:ea:6e:80:d7:
7c:49:5f:35:e0:98:5d:4a:58:b4:f1:34:dc:fe:c7:dd:cc:56:
fa:9c:c5:cd:da:0a:4b:f4:2a:53:a2:54:b3:d0:81:55:e0:11:
1b:ad:05:0d:16:24:8b:cb:9a:b3:15:e0:c7:8b:cd:64:c0:17:
80:f2:c2:d4:f5:18:00:f7:ba:ce:74:11:6e:95:d0:1f:6a:6f:
f0:95:88:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:18:22 2025 by rpki-client