Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: 9nhyXMw8PkrW7h48SSUneWFHKXxb3Vsmwx6v/ZG9nzI=
Subject key identifier: D2:80:71:BA:FF:39:74:CF:55:BD:0D:3B:44:24:E5:B4:3F:D2:93:ED
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 0197B5C48E3CB1A6DA510CC214E1C7DB91DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 128B
Signing time: Sat 28 Jun 2025 09:00:46 +0000
Manifest this update: Sat 28 Jun 2025 09:00:46 +0000
Manifest next update: Sun 29 Jun 2025 09:00:46 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: moaucOcwATlyh73C3lFIC0/Vht8Swe4OO9ZMb6vPFyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:8e:3c:b1:a6:da:51:0c:c2:14:e1:c7:db:91:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Jun 28 09:00:46 2025 GMT
Not After : Jun 29 09:00:46 2025 GMT
Subject: CN=d28071baff3974cf55bd0d3b4424e5b43fd293ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:46:0b:f8:ce:f4:ca:b0:44:4f:09:45:b5:
86:92:64:e9:8c:0d:b4:75:40:f2:35:4e:77:9e:c4:
fe:cf:b9:1e:77:31:c9:42:a5:52:44:9e:56:cb:7b:
43:29:58:68:a3:19:58:a3:50:40:09:07:00:d1:9b:
3a:8f:7a:c3:9e:89:f9:16:6b:33:26:29:24:cc:ed:
fb:fa:2f:fc:e9:52:df:58:6d:a5:69:bd:c0:8b:fd:
e9:98:84:17:36:6c:0a:8e:87:ca:3f:4c:83:cd:65:
93:5f:39:58:9d:ca:91:d6:0f:58:fb:03:91:d5:f8:
79:cc:f4:30:8e:f2:ab:b4:bc:ba:f6:4d:66:fc:b7:
3a:13:47:2c:9d:a0:42:66:e2:4b:b4:6e:89:4b:8b:
ec:d7:dc:1a:20:88:56:1b:33:5f:f5:58:1a:b6:00:
8f:dc:07:ab:d4:e1:2e:f8:70:c1:21:37:6c:bb:33:
8c:58:18:db:1f:56:fd:18:f5:a1:28:df:66:e0:d6:
74:32:12:f6:5c:84:fb:49:a3:90:51:25:86:b3:a3:
c7:4b:5f:3c:0f:49:fb:ff:6d:0c:33:19:a4:15:32:
21:05:3e:2c:8a:df:27:47:90:a2:68:39:03:76:ca:
f5:60:e4:51:25:80:53:a8:b2:98:98:d6:10:82:0c:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:71:BA:FF:39:74:CF:55:BD:0D:3B:44:24:E5:B4:3F:D2:93:ED
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:23:a1:60:b1:ce:a6:22:19:d3:d2:6a:dc:7c:d5:e5:6f:ed:
ae:a4:39:79:28:e5:24:e6:b3:64:6b:02:47:ad:0f:c6:ef:2e:
96:19:4c:ae:47:28:f2:30:c0:09:bf:0e:8c:a4:59:c1:d9:17:
27:be:95:16:7c:78:19:8e:22:2b:a3:4c:b2:b7:5e:d3:53:bf:
19:fa:af:f0:f3:c3:9c:31:0b:82:d1:1a:cd:7c:05:c4:6c:33:
95:1a:91:1a:05:55:c4:19:41:55:b5:a8:f2:9e:44:36:1f:2d:
fb:a8:df:42:e8:f7:ee:ce:71:cb:cd:53:71:49:c6:5d:14:1b:
b6:f7:49:b1:58:13:c8:cb:b5:f2:fe:51:13:b5:c1:02:14:8e:
3e:4f:a5:e9:28:3b:2b:a2:aa:e8:3b:8b:4e:36:28:03:b7:39:
31:7a:b4:02:80:6e:00:52:41:f5:65:ff:cb:40:b2:3f:06:03:
c8:90:45:0a:33:5b:d5:e8:98:44:86:fa:c6:da:48:8e:7b:75:
94:87:13:bd:3e:28:7c:cb:99:70:87:c3:a5:ad:17:a6:69:b2:
01:b4:8b:c5:af:2a:b4:6b:84:f9:b3:32:70:47:d1:0a:24:c4:
f0:75:a0:52:79:33:68:a6:ac:1b:d0:6c:a0:04:8e:4c:36:cb:
d8:0b:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:14 2025 by rpki-client