Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: 1UaftZPOLAfPhRnsAjk8BNDN27p32fh/jreC+HrMwC4=
Subject key identifier: 33:9C:6E:36:CB:8E:5B:21:31:54:76:21:F6:90:3A:89:1C:E3:AC:4A
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 0197B7B2E49C4D1F92B8F3E1F7E0FF645BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0C5D
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: 7DFXTVpcz5Ag96Q/sxsRw0bDdopdsqN4TuP0Qup3gv0=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e4:9c:4d:1f:92:b8:f3:e1:f7:e0:ff:64:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=339c6e36cb8e5b2131547621f6903a891ce3ac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:7b:02:e2:cd:dd:f2:6c:14:32:69:7a:92:
5b:7e:9e:11:df:14:25:9b:aa:1c:69:1e:05:81:19:
81:e6:d9:aa:00:88:94:9b:0a:0f:77:81:28:ec:5d:
67:3d:4a:98:c0:15:cf:66:38:9b:43:70:72:62:d4:
aa:0e:c9:f9:21:5f:ef:8b:aa:94:51:c6:63:4c:90:
b0:17:f8:38:f5:c6:cf:d1:4f:80:2a:7e:93:8c:08:
dd:84:a0:78:6d:d0:9b:2d:a0:85:ab:b7:e7:f9:02:
b4:7a:59:9a:e0:5e:c9:44:43:ab:b6:d9:b3:74:59:
bf:24:bc:3e:0c:60:dc:cf:36:75:67:d8:c6:24:7d:
a5:b8:70:4b:08:78:00:37:3e:f6:1e:e1:a8:82:c5:
93:d8:e6:8c:a6:6a:f6:ba:4b:e7:75:46:c5:90:d0:
af:a1:0a:2c:c6:37:91:d8:bb:6a:7a:49:f4:54:ea:
1c:e1:12:4a:d3:b2:05:96:20:d3:ac:f6:b9:9c:4d:
26:8f:a4:ca:c9:96:0c:26:4a:12:6b:2d:c5:ba:d0:
b5:ab:1e:16:cb:98:cf:64:e8:17:cb:42:07:aa:9f:
64:8f:47:c7:a4:bc:1f:e5:da:a1:31:c5:39:d4:52:
50:b3:91:6f:a7:09:5b:7d:e4:9b:a1:b3:d4:d8:50:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:6E:36:CB:8E:5B:21:31:54:76:21:F6:90:3A:89:1C:E3:AC:4A
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:26:63:46:bd:5d:d8:28:0d:e5:58:95:a5:dd:35:c9:54:88:
95:5c:7d:9a:7d:f0:60:85:f3:97:96:b2:33:10:a6:af:31:0d:
c6:75:e6:bb:2f:37:9f:d7:cc:68:25:8c:10:0c:67:57:13:89:
e6:7c:7b:2d:bb:55:1e:23:a8:ce:8b:30:07:fa:8d:d3:73:f2:
5e:cc:9b:55:cd:56:11:63:d3:75:7d:8c:ea:b7:98:a3:70:82:
ae:06:1e:5d:4a:1f:3f:b0:e5:dc:0d:21:ae:3d:42:f2:12:b0:
b2:6a:4b:62:62:a1:7f:7b:55:2d:f6:1b:65:52:ef:4d:0e:32:
c4:ba:c0:45:d1:7b:eb:ab:74:17:37:cf:82:12:42:5b:ed:6f:
fd:2e:19:f1:ec:5e:90:28:41:f1:e6:72:7f:16:9e:ab:17:cc:
3f:c7:85:65:a4:77:0f:57:29:c5:49:38:e0:5d:24:7f:17:87:
2f:5e:b8:7a:8e:28:37:5a:9d:e4:b7:2a:52:57:0e:b6:dc:b7:
b5:f6:d2:bc:c6:3e:60:d8:f1:1d:8e:5b:3e:38:3e:bb:44:c8:
25:97:58:04:09:0f:9e:81:4b:de:9a:4e:39:2c:53:37:fd:96:
e9:98:0d:11:c1:9b:69:60:04:45:ba:e9:c6:7a:e7:66:e9:af:
5e:c2:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:56 2025 by rpki-client