Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: OfEC6RneDF4Pw/YnfUyXJCs22IGvEG4kEM1KY3sIhAc=
Subject key identifier: 7A:05:21:2F:84:9E:02:6F:5E:A3:39:D1:80:E7:99:8B:F6:2E:11:4A
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 0197B7B328C0F447C3448A0257C184CA35F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: Q39M80XB8zc584qhxBkp0HOGpVsAGHpfyELPbkQ3rPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:28:c0:f4:47:c3:44:8a:02:57:c1:84:ca:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=7a05212f849e026f5ea339d180e7998bf62e114a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:d1:87:b5:47:9d:45:d4:0f:4e:94:e4:cc:
6e:4c:6d:f1:8b:6d:68:4f:dd:65:a1:2f:43:e7:63:
bd:e8:f1:6d:d4:e4:06:12:a4:6f:7c:3e:4d:90:d7:
bb:8b:9f:7e:51:18:f9:d2:37:b0:ea:68:e0:90:90:
f2:5f:12:68:7f:11:d8:d4:b1:6e:f7:be:1c:5a:e1:
d7:cd:5c:10:48:48:2c:01:3c:df:d8:80:5e:13:5f:
d0:b7:4c:e4:e8:dc:f1:cc:8c:d8:eb:20:f3:7d:37:
c5:d3:62:e9:60:e1:79:f2:9a:fc:95:91:2d:be:c5:
14:dc:14:86:b1:09:d8:3b:a8:c5:b1:3d:03:2f:9b:
6c:ee:52:e9:86:ca:37:eb:17:95:a0:f1:b1:14:cb:
29:86:10:b3:e7:01:63:25:90:b6:0b:3a:33:5f:c0:
ff:a9:17:4d:0b:c2:6b:ad:d0:de:62:96:12:19:8f:
c0:48:aa:05:ae:9a:04:32:ac:29:d4:45:41:bc:f6:
02:5d:23:74:ce:3b:4d:ac:23:fa:7b:b3:cc:fa:6f:
3e:68:96:d9:a6:a5:80:97:fb:79:98:08:4e:10:72:
de:83:de:33:04:c4:63:8a:56:77:10:c5:98:50:77:
ab:b2:09:47:e6:50:72:26:5d:e1:cb:02:98:c5:6b:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:21:2F:84:9E:02:6F:5E:A3:39:D1:80:E7:99:8B:F6:2E:11:4A
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:a7:e2:de:e8:87:b5:4c:47:ce:fe:b9:0a:81:94:bd:be:
57:f8:ae:67:47:c4:78:15:2f:72:d4:f8:56:df:ef:4b:00:3e:
cb:21:e6:47:ca:d8:c8:39:61:cb:17:e3:39:66:46:c7:2c:fe:
26:68:f2:d5:62:59:5c:d7:e0:78:49:a3:ab:88:56:11:ed:a7:
d4:af:2a:02:15:9d:8e:1c:60:95:0a:86:b2:d4:7b:b7:8b:e0:
4c:10:46:71:0e:ca:e4:7f:25:a8:c9:d1:06:aa:fd:f3:78:7d:
f6:fd:ae:62:8e:51:a3:37:97:0a:db:0c:98:1e:7e:ca:e2:fd:
1d:22:9e:bb:92:2b:f6:48:1d:a7:6b:c0:ff:67:56:fd:f1:3f:
1d:8e:4c:66:c0:04:c7:3c:8a:d9:80:c8:b5:e3:51:1d:4e:fd:
c5:6c:b8:87:fb:78:2e:71:54:1f:98:00:39:17:59:8f:cb:0d:
39:95:49:1b:14:61:3d:0a:9e:b8:85:60:5d:81:f3:58:41:60:
74:30:16:83:b8:b0:f2:6e:b0:80:ea:ce:6b:df:df:1f:c8:98:
3f:45:aa:34:35:35:bb:11:9a:ec:39:4c:43:0c:cb:7b:73:b8:
74:5e:e7:c4:83:a7:8b:ad:ce:d7:75:a2:b3:6f:ff:c4:55:db:
29:5f:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:19 2025 by rpki-client