Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: TiDUguICCopGJogUOjB0lrbylNayV7Mnk5Tc6C8a/FM=
Subject key identifier: 55:34:AF:FE:5B:C0:BB:BF:E0:79:FF:07:63:C9:93:7D:87:A4:8F:69
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0197B70F33EC39F9E7C980E6AB5F06CB16B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 10C2
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=)
2: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: tpVCV+y38XdG8gRMk94WoY4YkQJ3ApyIeEk4tKvS1Ao=)
3: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=)
4: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (hash: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:33:ec:39:f9:e7:c9:80:e6:ab:5f:06:cb:16:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=5534affe5bc0bbbfe079ff0763c9937d87a48f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:be:4b:31:f6:7d:ea:a5:cd:4c:2f:ea:99:
78:18:e6:be:b1:86:55:5f:36:f8:25:ce:54:32:ca:
73:e3:3b:8b:4b:79:6e:32:61:62:22:e1:28:ff:42:
2e:23:90:d6:67:90:e6:18:a3:be:58:4e:35:a2:07:
b7:e7:23:10:ba:e5:6b:66:c6:71:72:55:26:c5:17:
7e:a6:78:3c:14:8f:37:7f:da:26:39:6c:23:8a:d2:
61:c8:b0:cf:a6:5d:90:89:0e:b7:0b:fc:fe:88:b7:
cc:93:82:49:13:7d:d5:fe:a9:d5:1d:51:b0:f2:fc:
6f:48:90:d4:b7:65:bc:9a:92:9e:b8:f8:35:53:7f:
c6:d0:13:ec:d1:51:1c:c0:d4:f5:e2:df:73:c8:ee:
ba:e6:bb:e1:8b:d9:b6:08:c7:39:8b:c4:20:44:48:
f1:87:6a:04:82:e7:97:f9:b2:2f:49:50:84:96:8b:
3b:32:43:bc:37:7b:a6:ba:dd:ac:6b:1f:5f:9a:e0:
1f:6d:33:c5:22:7b:b2:77:66:58:b8:fc:f9:cd:7e:
ba:05:91:55:22:17:6f:82:e3:0d:52:2f:67:be:8e:
ed:f6:f7:34:f1:40:b1:f7:6b:44:1a:cf:a7:11:9b:
eb:3e:4a:cb:5f:f7:98:c4:38:2b:8a:0c:c3:83:5b:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:34:AF:FE:5B:C0:BB:BF:E0:79:FF:07:63:C9:93:7D:87:A4:8F:69
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:02:07:c3:28:3c:d1:74:b4:90:0e:3c:2e:fa:06:09:96:69:
e8:04:f7:0d:ae:41:26:89:c9:e4:77:f6:15:f4:c2:21:65:ca:
8c:7b:3a:98:38:5e:da:8f:66:66:68:d7:a0:84:83:c4:79:4c:
33:5c:a5:8b:64:38:4b:29:01:63:47:82:0d:4b:eb:e6:7f:c5:
f0:b4:3b:ec:be:f3:de:26:68:7e:5c:b9:29:db:59:91:82:34:
df:a7:f1:7e:0d:df:e3:bd:d3:f7:88:69:6f:62:92:99:94:d0:
7f:dd:73:84:98:68:9f:6d:ba:f5:19:64:9e:e2:d0:e9:00:bd:
4b:5d:7d:b6:77:0b:ab:6f:2e:bf:34:30:6f:16:3d:c0:6b:04:
9b:d4:4e:b9:bd:71:26:55:99:8b:fe:b8:05:f2:18:42:a2:00:
99:76:90:83:d4:af:14:75:c5:e2:7b:e2:cd:f7:53:08:4e:cf:
68:2b:93:9b:d7:d0:46:a0:e4:e9:de:bb:f8:29:0b:31:35:8d:
36:37:ed:54:d5:bc:2e:09:ea:cf:af:ad:20:9d:b0:56:62:10:
86:07:bb:c8:dc:fd:cd:cd:72:c5:3e:c8:25:c0:af:f9:94:51:
78:27:fb:69:88:5a:44:5f:83:ac:ea:66:25:c0:59:99:d9:c2:
97:f3:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:44 2025 by rpki-client