Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: E/fMAxRZmcnUBfVjPl3WBlM6R78dCzuVvwmcBMSqy+0=
Subject key identifier: 1E:3C:8E:5D:F7:EF:E1:95:3D:01:C8:84:F1:71:FE:FF:26:40:6B:90
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 0197B8C6237BC270BEE4E267194FF2BC7DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 23:01:22 +0000
Manifest this update: Sat 28 Jun 2025 23:01:22 +0000
Manifest next update: Sun 29 Jun 2025 23:01:22 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: sKqI74gmUhNDSRdBV9chDVZJHLaLy8oF5JdIWA8LFKM=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:23:7b:c2:70:be:e4:e2:67:19:4f:f2:bc:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Jun 28 23:01:22 2025 GMT
Not After : Jun 29 23:01:22 2025 GMT
Subject: CN=1e3c8e5df7efe1953d01c884f171feff26406b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:45:28:06:af:6c:d7:c8:e9:a3:98:cc:c5:
a6:22:df:7a:d0:a5:5c:dc:8d:97:f3:d6:2c:b1:d6:
de:98:93:d2:9d:7d:e8:1e:29:83:2c:d6:54:a2:c8:
12:ff:14:42:42:e1:ca:34:72:fe:1d:65:3d:eb:da:
d2:1e:ea:d7:d4:1e:ab:d2:ff:6f:2a:14:05:9e:5a:
12:ba:9d:39:4b:16:04:9c:8a:a6:0c:25:dd:df:96:
1d:13:a4:cd:2f:87:a6:4d:29:8d:3a:c7:24:8f:58:
1b:5b:5b:58:8e:fe:c1:08:69:6c:f1:ba:5d:11:ee:
9f:85:03:79:11:ba:e5:1e:93:5a:52:d2:7a:f9:66:
ec:09:bf:f1:90:b9:4f:31:a6:45:de:91:c5:1c:62:
da:d8:c6:14:b2:f3:79:2b:44:90:2f:1e:67:19:07:
8e:7b:b2:0f:3d:dd:3f:32:80:4e:b9:e3:bd:09:7f:
47:0c:59:a0:ce:dd:63:5e:b5:48:5f:bd:a5:b4:1f:
81:59:aa:5b:b1:74:86:f0:68:84:76:fb:63:d0:02:
7a:59:f7:bc:5c:1d:05:76:40:af:9d:d3:d5:76:52:
cc:97:7a:35:03:52:3a:f1:00:04:56:84:15:27:20:
7d:66:2c:11:e4:4b:02:dd:46:d4:c6:50:df:66:18:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:8E:5D:F7:EF:E1:95:3D:01:C8:84:F1:71:FE:FF:26:40:6B:90
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:2f:fb:cd:02:3a:7b:6e:04:7d:d0:39:71:65:cc:39:95:
67:2b:72:e5:bc:df:31:38:94:af:03:47:a0:44:26:5d:7e:6c:
15:af:f2:28:86:bd:6d:03:79:68:93:6b:63:00:da:1c:a0:e9:
15:47:e8:a7:fd:36:3d:7e:d2:37:59:2d:2f:d3:f8:42:a7:f6:
8a:d8:5a:36:cd:ad:45:1e:cb:91:ee:0e:9d:15:44:20:2a:a5:
c7:04:c0:6d:4c:3c:36:3e:fb:9a:63:05:6b:bd:02:d8:4b:bc:
78:6b:37:f4:93:1d:bc:f4:98:77:d0:1e:9b:d3:ba:01:c8:32:
dd:6b:e5:57:a0:45:4f:43:36:55:5d:a2:5f:19:a0:34:1d:36:
d6:ff:61:1f:c7:72:72:88:73:c8:b3:86:58:64:b0:0d:d5:a3:
36:fc:95:fc:89:80:9d:4e:42:3d:ea:92:28:ba:01:15:06:7d:
3d:79:95:5f:b4:b2:ec:07:54:57:2a:0f:03:45:f8:e8:b4:11:
99:18:04:cf:2c:3b:b6:00:e6:96:90:8f:81:3b:86:83:6f:5d:
be:e0:4f:a5:d7:b9:24:1b:7f:5b:6c:00:79:8e:9d:7f:4e:cb:
4a:81:68:c3:a7:c7:ae:66:c4:4a:60:78:ac:46:eb:74:eb:0b:
2d:f9:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:56:33 2025 by rpki-client