Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: P14cDAd0z0YyvgoN5TzUyf5cjOWD4RPfZvVQFtrzGho=
Subject key identifier: 84:D2:96:3E:CB:96:D9:AE:9A:87:68:FB:9A:7E:1C:18:FB:2D:4B:67
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 0197B77C237EB17F81F0725EC8F24777A363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 045C
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: K6POK6ObBKix6+P7t7NDQ7w6WQSh0O70bUL+Sco1NS8=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:23:7e:b1:7f:81:f0:72:5e:c8:f2:47:77:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=84d2963ecb96d9ae9a8768fb9a7e1c18fb2d4b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:02:25:67:62:b6:63:84:e7:95:18:4b:bf:
7f:63:09:3c:8f:22:2a:11:78:58:2f:7e:c5:91:88:
f1:e1:74:a4:9c:8a:10:7a:82:fb:25:20:58:8f:e2:
f6:9d:d8:d2:33:d6:bf:50:a0:88:b9:08:d0:ca:6f:
37:51:de:70:ca:0a:07:9f:2c:a1:4d:42:66:b4:3b:
8b:49:d7:fb:db:3c:67:d2:0b:ce:3e:de:8a:b4:b8:
72:b9:a0:27:5a:95:d3:8f:30:16:8d:fc:2b:78:5a:
79:79:92:00:2f:bb:1d:c9:c5:4a:46:fc:07:0c:ae:
47:8d:71:9e:31:d7:4d:ab:bf:a6:ff:0b:78:a7:da:
e8:1f:ab:59:78:50:c7:1a:d4:38:f2:c7:69:27:57:
56:b3:9d:bf:69:5e:ab:e5:64:4f:b6:17:77:bb:f4:
9b:1c:e2:62:37:c8:bb:43:42:c6:77:d6:10:a6:ff:
3d:04:92:0b:4b:c0:94:2f:a8:3d:b8:ca:96:56:50:
a7:61:5b:0d:c0:b8:9c:96:69:b2:d6:20:0a:9a:62:
b1:94:e5:98:60:0c:97:bb:79:c1:71:4b:f0:7b:ea:
1a:63:74:df:bd:79:14:17:dd:74:0d:13:4c:ab:d3:
a6:09:4f:1b:10:2f:63:2e:f1:b5:04:fb:c1:d3:53:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:96:3E:CB:96:D9:AE:9A:87:68:FB:9A:7E:1C:18:FB:2D:4B:67
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:0b:ad:08:54:69:4c:fd:ed:cb:eb:ae:fb:56:b7:d6:56:96:
1b:44:5b:b4:ca:95:34:a2:83:f9:1b:e8:93:02:b1:93:5b:f8:
78:ba:b9:b9:5c:52:8a:eb:0a:21:99:ef:8a:ec:33:65:b0:56:
5b:f4:40:ef:df:4a:a2:2d:10:ad:83:53:ae:80:18:9d:d8:b4:
20:4f:ad:f4:37:7d:f5:2f:57:49:57:17:9f:18:4c:53:59:c7:
84:a9:35:ca:48:9d:d0:c6:75:9f:a7:db:62:25:df:ed:7c:bc:
5b:ae:ba:48:21:28:95:37:18:d3:7d:7d:f2:94:fe:b6:34:3b:
de:2b:78:9e:c5:9a:f1:f6:25:2c:73:84:6f:c0:1f:62:25:57:
13:82:4c:e2:97:d6:e5:8d:d6:d6:f8:27:c6:ac:84:bb:1f:53:
51:1f:c0:eb:0a:04:8e:b1:0e:9e:c9:8d:4d:a5:07:0f:e2:55:
8d:5a:6a:5e:62:b6:43:86:ef:95:07:ad:ee:46:3f:f2:46:25:
79:4a:43:fb:b2:37:56:cc:86:42:a9:9d:5c:ee:51:74:b5:22:
90:f6:bc:49:f2:41:e1:ee:73:f2:78:44:22:37:25:f7:93:c7:
38:1b:28:3f:5a:c0:eb:9e:d3:fe:65:53:40:00:fb:3a:89:61:
e8:f6:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:13 2025 by rpki-client