
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: sri5Svn+J5X5vriD4KVCldpBfCmfT5yhgzAPqCcsclc=
Subject key identifier: 24:5D:9F:03:B4:7B:25:58:30:B5:07:8A:63:DD:E1:28:AB:25:A3:DA
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 0197B88FD0FBE8EB4A5212B6B0BB55C7373A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 22:02:02 +0000
Manifest this update: Sat 28 Jun 2025 22:02:02 +0000
Manifest next update: Sun 29 Jun 2025 22:02:02 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: ZrENAvPqqSYeXIZ4v3a1QHQkjM8BxlAdJx7GBwpxOgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d0:fb:e8:eb:4a:52:12:b6:b0:bb:55:c7:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Jun 28 22:02:02 2025 GMT
Not After : Jun 29 22:02:02 2025 GMT
Subject: CN=245d9f03b47b255830b5078a63dde128ab25a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:00:20:a3:3f:2a:3f:7f:a0:58:59:48:67:
be:16:d4:0a:2f:f9:70:31:d8:7b:e8:bb:3b:2f:61:
e4:e7:57:c1:41:4e:08:1d:68:9a:3f:de:29:c1:ea:
56:30:27:11:71:9b:f4:c1:70:d9:15:07:4b:04:9a:
06:b4:99:7b:b0:94:27:a9:23:91:82:be:8b:95:74:
e0:e6:dc:e2:15:51:a2:af:5e:74:f9:7b:a6:e6:37:
9f:80:7a:4a:1b:b0:f0:d6:48:dc:4a:88:34:39:69:
c4:70:6b:d1:ac:5f:7c:29:f6:45:e0:fc:3c:0e:a8:
26:ca:08:97:22:b9:f2:49:3e:2c:af:f6:81:57:3a:
02:cf:98:67:0b:31:ad:e0:d0:e0:03:ea:53:60:53:
c4:ab:c9:4e:6b:5e:80:52:e9:c7:ab:95:a5:2e:08:
84:d2:c6:38:78:97:5d:93:c5:a1:f6:13:48:93:b8:
27:c6:5f:c6:6b:2b:a4:0b:06:76:a1:6a:eb:dc:ad:
b9:c4:be:68:8c:ee:bf:c0:1d:63:f2:21:a4:b1:bb:
80:24:08:ec:58:44:a6:97:8f:88:aa:17:b7:a5:f1:
8f:10:e8:72:fd:7e:e3:6f:fa:20:bb:cb:64:b0:b9:
b7:d6:f8:d2:63:f1:a2:b2:19:90:dc:4c:ed:a4:40:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:9F:03:B4:7B:25:58:30:B5:07:8A:63:DD:E1:28:AB:25:A3:DA
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:1b:97:cf:09:3c:26:17:93:e6:bc:12:6d:b2:a0:fd:43:
03:d3:87:07:a1:b8:83:4c:93:b9:8d:cc:6f:0a:85:f5:63:c2:
ea:1d:4c:23:eb:86:c6:3d:aa:68:49:78:ed:4b:27:7a:7b:39:
7c:6b:fe:41:83:2f:fc:bb:e4:16:42:03:cb:60:c5:9d:10:60:
19:7f:e9:07:9b:f0:4e:42:b7:9c:57:33:53:7f:c6:e0:4f:6a:
dd:bb:a6:99:13:bf:15:2b:54:29:0c:3c:e4:34:17:e8:43:88:
cb:4f:a3:5a:16:70:b0:d9:d6:1d:99:11:76:ed:50:58:5b:94:
8d:6d:86:40:cd:62:c0:94:32:08:84:14:ff:ef:71:36:dd:f6:
83:7c:7d:af:83:d4:76:79:bc:0e:2d:f1:ab:3f:8b:c9:b2:09:
55:07:4b:72:ac:fe:3e:b8:4b:44:f8:7e:0c:4e:4b:23:5a:32:
88:10:f2:b8:8a:3f:76:57:78:b2:96:07:f9:f1:8e:65:7a:54:
62:07:e9:22:37:c6:f4:39:0a:df:ef:cc:af:44:c0:fd:51:44:
76:01:7d:70:b4:f1:8a:d2:e8:68:20:34:f9:09:b0:11:da:fe:
86:1e:aa:58:bc:03:79:19:8b:84:09:45:30:9f:1f:e5:10:90:
0c:79:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:39 2025 by rpki-client