Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: 7mP4QrxRdnvbB+dI/LHPaatkzuFvN4t2RmaCIshXjTg=
Subject key identifier: E3:95:C8:AC:A0:80:F1:51:56:87:B5:6B:7A:FB:77:31:07:78:00:A6
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0197B6A049F02D001C926418DF29A4666EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: Hz85JfLEN1sASaeEIOEoCF45ORJWQNIKYPUYI5wH3TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:49:f0:2d:00:1c:92:64:18:df:29:a4:66:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=e395c8aca080f1515687b56b7afb7731077800a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:19:72:05:97:69:69:13:43:ba:a2:62:e3:
20:29:91:69:7c:01:06:d7:02:e6:cc:b6:ec:a5:95:
f2:b8:ec:e3:49:04:2d:f9:0b:af:63:fe:81:a5:b3:
48:0c:01:00:49:ac:c1:22:ce:c0:44:13:d2:24:67:
69:68:65:29:a9:53:12:d9:67:33:b8:76:49:fc:e0:
9d:41:ff:4b:d9:9a:a5:2e:31:27:b3:34:18:50:85:
cd:f2:ca:16:0f:0a:cc:b7:0a:b6:ad:c9:41:1c:51:
35:8f:a8:57:15:be:31:3d:f9:47:6d:72:27:6e:f9:
09:d7:b7:55:24:b3:3c:c8:37:ea:75:6a:a4:ed:54:
7a:7b:e0:b3:58:2a:58:23:08:d4:b8:0f:cd:8a:a2:
e7:dd:88:cc:51:86:cf:e9:9a:a9:3a:84:d6:2d:3f:
41:ee:1c:d0:82:30:24:30:bf:3d:63:f5:4b:e7:94:
ac:20:a8:3b:d1:d6:9c:c0:86:15:31:66:f5:39:10:
5f:fb:bc:c0:f1:da:e7:49:cf:e7:42:f6:71:4d:48:
15:ed:58:1c:ff:57:98:49:65:03:5d:9b:b5:5b:e4:
c9:19:d2:20:f9:04:92:fe:85:c1:da:ff:bb:a2:a0:
26:cc:90:ee:3e:72:5f:3b:f3:8d:95:1a:e1:3d:7a:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:C8:AC:A0:80:F1:51:56:87:B5:6B:7A:FB:77:31:07:78:00:A6
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e9:23:ac:5d:93:a5:e8:63:7a:35:c3:6d:f3:3d:9c:c5:44:
0b:7d:13:2f:dd:49:f5:8c:35:ac:60:d5:78:c7:a4:77:c5:02:
27:12:cf:13:50:05:77:44:2f:11:de:f6:c8:da:0b:40:3c:b5:
11:3a:62:06:c3:53:23:53:1d:b9:76:cb:b3:9e:f2:7a:89:95:
aa:29:3b:33:6e:28:da:90:65:d4:3c:3c:de:46:7c:1b:3e:c6:
77:9c:0f:64:89:32:43:54:46:2e:d5:43:b6:1a:e0:29:0c:63:
20:ad:2f:5e:d5:92:d4:64:f3:a6:02:24:f1:ca:31:31:3e:35:
94:5a:97:94:05:ca:65:9d:01:9b:71:20:74:3a:c5:ce:2e:6f:
5b:92:75:ae:9d:67:98:24:d0:e3:b2:75:a4:4d:eb:41:7e:93:
22:0e:85:8a:a4:b0:8b:b0:7d:68:6a:09:97:b1:0c:d7:cb:fc:
66:73:e9:6b:54:c2:87:f8:3d:67:93:e9:22:66:9f:ae:0a:de:
7d:96:a9:01:42:bf:0d:0f:03:35:c8:58:be:5a:ae:25:86:d9:
ee:09:82:e9:64:fb:03:d2:ec:0e:48:3b:48:a7:0f:1c:02:53:
de:49:3c:72:eb:1b:a8:33:6e:23:b5:61:39:b7:77:03:b4:42:
78:fe:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:29 2025 by rpki-client