Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: ks8fxQlEyRqrsZsbnDD75YEONwf4AMKWm5U7yg9iuVY=
Subject key identifier: 4E:B6:75:9F:69:D8:44:CE:3F:DD:84:31:69:4E:70:0A:A6:97:46:2D
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 0197B6D7A901F13F9261EA4560B42696D072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: HeG/jvcV6V8QFvoLkffM+lfVLixOUnv/Fa9AVl7e3PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a9:01:f1:3f:92:61:ea:45:60:b4:26:96:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=4eb6759f69d844ce3fdd8431694e700aa697462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:45:43:74:8c:22:35:4f:e9:4c:32:b8:e2:
1e:8d:94:6d:ab:c3:e9:1b:42:8d:ec:d1:bf:62:8e:
38:c0:a6:0d:35:56:d2:56:4e:05:a0:5f:b9:01:5f:
2b:34:62:72:fe:9e:55:99:bb:d9:1b:c3:93:18:10:
8b:2b:aa:24:f4:43:af:f0:1a:66:14:be:78:25:24:
a1:47:1d:68:c0:94:19:ad:5f:b5:5c:67:8d:16:fd:
e7:10:30:99:47:fc:c8:15:b4:cb:90:cd:a7:f1:ea:
94:2b:2c:72:b4:76:a9:3d:83:fa:15:d5:69:82:ec:
97:93:b7:12:f2:71:16:36:27:6a:7d:a0:54:ae:18:
1e:76:06:2b:69:22:a5:28:42:f9:5d:56:35:34:54:
51:e1:0c:a2:a1:32:67:16:00:04:16:5c:3a:10:de:
ef:de:d6:aa:29:16:1e:13:72:fc:67:c4:3c:21:14:
b9:99:78:8e:f5:5c:e5:f0:31:27:47:44:ec:07:03:
c6:b6:34:f2:fa:2f:99:9c:1f:4e:9d:a3:c9:57:27:
b2:2c:cd:6e:02:e0:ac:75:f6:c4:de:1d:ec:90:df:
bd:91:3b:53:d9:ea:ad:16:1e:7a:6f:87:79:00:7f:
51:5b:4e:09:9f:55:62:16:01:f3:93:d3:0b:65:76:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:75:9F:69:D8:44:CE:3F:DD:84:31:69:4E:70:0A:A6:97:46:2D
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ef:3d:ed:35:f1:48:c7:67:23:d7:d8:3b:53:7a:05:9e:46:
35:f6:57:e5:e9:4f:a8:ba:2f:d0:b8:10:71:3b:4d:36:b3:36:
7e:91:35:d0:a9:a6:eb:51:e0:1e:22:e5:7d:d1:d6:95:a7:8a:
f9:5a:a4:20:8b:0c:6b:95:9e:25:94:59:37:85:79:42:a3:86:
33:0f:5c:2b:2e:61:fa:da:8e:11:44:84:ff:7e:75:c9:0d:29:
5b:7b:28:39:7f:43:86:e1:ee:37:71:09:f4:64:36:98:c9:e8:
c8:9f:21:64:b1:7b:3a:1f:f8:fc:b0:e5:21:10:0e:20:f4:9a:
7f:cf:8b:9a:5d:f9:96:b5:2f:94:de:b6:82:c6:4c:f4:09:95:
da:25:33:eb:7e:5f:a0:ae:80:ca:53:9e:19:8b:47:58:b6:ac:
22:43:ba:96:07:39:8a:16:eb:19:26:15:3e:de:d7:56:76:1b:
e1:cb:20:8d:99:cd:53:be:d3:89:bf:be:a6:71:6c:9c:26:c0:
f1:c4:fc:a7:14:55:5d:6a:d0:1f:b1:e8:57:a9:01:76:9f:1d:
94:42:e6:76:39:e5:f3:8c:aa:e0:97:7c:f1:43:5c:db:c1:d0:
42:2c:2a:34:5e:88:55:f4:80:e3:d1:d8:31:cf:42:4a:5b:f4:
21:d1:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:48 2025 by rpki-client