Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: DYXqLD6skzCfaHfTcUkBYQG7WFKpd/3+wiWAvZZwzRA=
Subject key identifier: 33:64:D6:59:87:85:1A:B6:AD:75:AF:2A:BF:7D:71:2B:8A:3E:B9:5D
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0197B745488935B6E252A8876191789F001B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0BDE
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: eQLJg8rHo1ZXLGgioDpf1Lxx51Kf1G8gCureR4E+yyI=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:48:89:35:b6:e2:52:a8:87:61:91:78:9f:00:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=3364d65987851ab6ad75af2abf7d712b8a3eb95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:66:6d:83:6e:e3:a5:f6:5a:fd:ab:b2:9a:
0d:e3:84:aa:9a:94:bc:d1:06:d6:be:b0:97:1f:08:
57:ed:32:55:d9:8a:d0:ab:ea:1b:9d:07:5c:0f:0c:
7a:49:46:f1:24:89:6d:29:da:b3:fd:0b:0c:a7:b8:
71:f7:54:5f:56:bc:42:bc:00:86:e6:a8:66:dc:93:
cf:9a:3f:81:eb:94:07:4f:63:75:32:01:28:88:50:
45:92:3f:5d:17:09:b9:f6:ff:82:b8:ca:7f:c1:55:
f3:b0:9a:a8:46:17:13:f1:dd:ce:0f:d5:d1:42:e6:
8c:71:c7:c4:84:08:1a:ff:0b:fe:41:40:52:33:13:
a1:8c:9b:11:a7:32:02:c7:53:5e:08:fe:25:33:5e:
f4:79:e4:1c:ba:3c:56:5e:80:00:7d:a9:52:41:d7:
dd:cf:78:bd:5e:58:a8:9d:22:c3:06:02:c6:e2:25:
87:3e:11:e7:5a:81:f7:f9:03:9a:5a:2a:b4:6f:ee:
41:03:27:03:cf:be:17:fc:8e:c5:89:70:72:55:f2:
ba:30:10:16:14:46:ee:77:98:f3:20:52:b6:1f:80:
c2:b4:1b:9c:0c:e8:14:d8:c6:fb:17:a0:be:1d:6d:
d7:c3:d8:9c:77:62:7f:9a:de:f3:c6:a6:82:d1:88:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:D6:59:87:85:1A:B6:AD:75:AF:2A:BF:7D:71:2B:8A:3E:B9:5D
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:92:f2:50:e7:a0:2b:54:09:4d:2f:f7:a5:40:fe:76:5b:c2:
b8:93:32:fa:e0:56:df:c1:cd:c8:e9:27:0f:29:db:11:20:aa:
3d:0d:55:cd:2a:1a:c1:2d:3c:32:a3:7d:79:d9:69:7f:ca:2f:
b5:1e:3f:3c:cb:da:86:c5:3b:44:6f:70:5c:2d:63:43:6f:58:
98:8b:e0:98:d1:aa:20:0e:f5:3d:88:1f:d5:6c:3e:81:51:91:
d4:53:a8:7f:22:c9:9c:43:4c:6c:27:7c:0f:9e:1a:f9:ac:a0:
d0:51:dd:56:3c:ba:d7:ce:3f:44:c6:f2:d3:ce:13:cb:3b:57:
58:0d:d9:00:38:41:d7:33:25:39:ac:b5:aa:7f:7f:d6:a3:22:
33:84:c4:6f:61:2d:d6:73:a9:66:1a:be:a6:08:ff:f6:20:9f:
ab:57:24:a5:0a:19:3a:f8:c7:16:27:b3:ed:52:ca:78:70:e5:
8d:9e:ae:5a:56:bd:2c:28:dc:73:b3:e6:4f:18:5a:7e:7e:25:
74:9c:2b:53:2c:d7:fe:70:d9:d8:70:45:25:c5:e8:ad:10:ac:
ab:49:20:3e:71:34:b0:1a:c8:c1:be:17:4e:61:3c:01:71:ba:
ec:87:8f:db:0d:11:cb:5e:5c:bc:c7:75:44:2a:ae:f9:9d:f8:
94:89:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:50 2025 by rpki-client