Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: N46Grcilxz1nFNlJTuP9Dhl3rRy8ZHoCgGJKNsOEkDY=
Subject key identifier: 23:45:A6:6E:DF:76:14:B9:EF:1B:E7:F1:AC:E2:7A:5E:BA:1E:ED:EA
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0197B6A0E75BA37B730B3829355AD234A6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0C08
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: QSKLRJTkfsZ/KF1B/EVwXIw6TtF8LwMP5xQFQi5dIDw=)
2: T2qZTTFWVSNBNeXqRrv5AJne1B0.roa (hash: EWp0bMjXe6eEnMu430F2WwTP+lMlXpj/M+oOz9ex/1k=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e7:5b:a3:7b:73:0b:38:29:35:5a:d2:34:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=2345a66edf7614b9ef1be7f1ace27a5eba1eedea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:2b:aa:c0:d6:f7:f2:cd:13:0f:22:55:7b:
66:43:29:20:81:42:ff:6d:40:81:56:1c:25:ec:26:
b8:21:f1:37:32:2b:75:3a:c4:50:de:d2:85:37:11:
21:aa:b6:60:51:76:4f:88:ed:b9:40:3e:bf:79:51:
21:c6:45:e5:02:be:d5:8f:89:c1:55:17:18:e3:09:
84:71:c4:80:89:93:a0:e1:1d:62:8c:45:6c:c4:ab:
a6:8c:45:e5:00:a9:98:08:fd:70:61:b3:24:6d:9b:
33:1a:83:dd:29:65:9b:16:8d:89:2a:ff:57:af:94:
64:65:5d:84:ea:26:39:4f:f5:76:80:f1:48:8f:81:
2e:cb:a6:42:65:1e:9d:ff:4b:74:e7:8c:1e:84:ab:
b6:9d:ee:e0:8e:28:34:64:c8:5f:83:80:55:f1:a7:
aa:c7:f3:a2:84:fb:84:f1:f9:a5:79:60:06:39:64:
1a:01:5f:be:88:9c:4c:6b:8c:b0:55:0a:ae:cd:87:
8d:79:50:94:cb:e4:a2:68:14:96:67:54:36:2f:b5:
0e:a8:cd:60:13:06:c6:5c:82:ea:ab:ca:2f:c5:a3:
5d:4f:23:4d:b4:39:59:ff:d1:a5:93:e5:ff:5b:45:
7a:57:88:77:55:87:be:1b:0b:64:a7:ff:f8:6d:18:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:A6:6E:DF:76:14:B9:EF:1B:E7:F1:AC:E2:7A:5E:BA:1E:ED:EA
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bf:aa:c0:f0:68:dc:16:16:ce:78:94:4b:27:40:0e:ac:4c:
bf:75:e5:ee:9d:aa:80:ad:06:1e:75:06:6e:39:1d:1a:f8:54:
d5:fb:c7:04:7e:35:41:df:8a:b1:65:70:fe:38:63:40:f8:b0:
38:c4:e2:67:53:42:7b:df:1a:23:4c:d2:f2:88:2e:0b:54:79:
7d:98:f5:bd:71:18:36:3c:b5:e2:7e:ee:90:96:38:fb:e7:40:
ab:da:3c:de:e0:7d:46:ee:3a:ef:47:8f:d0:c4:7a:fd:46:75:
6d:fb:f3:42:9d:9e:f5:df:45:d3:46:50:a4:99:c3:a2:82:c9:
f0:8d:74:83:8c:42:2e:41:36:45:ba:93:a8:0e:39:5f:9d:70:
6d:6e:62:48:4a:8c:3f:95:93:a6:a9:45:48:72:39:58:04:15:
a9:03:37:f2:4f:94:eb:08:7f:53:85:82:b5:34:1e:98:91:41:
fa:65:68:23:68:87:9a:dd:bb:b3:87:e0:e7:12:55:5e:96:8f:
95:c3:63:8d:29:db:5b:d2:45:22:fc:ad:8b:82:7b:4e:d7:06:
52:e0:55:b0:8a:4f:fa:62:01:94:57:91:7a:03:65:f3:43:86:
93:1f:c7:46:87:cf:5e:28:0b:0c:ce:0d:d3:50:a4:f4:2c:f1:
ec:db:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:33 2025 by rpki-client