Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: gdFcssRVHGCKx/DIy8+2sdU82yh4wI/E2Ik4/W6cZaI=
Subject key identifier: 69:F0:64:E7:0C:82:6C:F5:A4:7B:41:DA:3E:85:B6:2F:97:A0:65:E8
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 0197B6A03E9E5DECA1A81E0A406108F6289B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0B05
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: QWcgYdQzUAZ8W9loJvNBRSoBe1gthQbuFMdGV7eNPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3e:9e:5d:ec:a1:a8:1e:0a:40:61:08:f6:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=69f064e70c826cf5a47b41da3e85b62f97a065e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:4c:9d:7e:ce:68:83:cf:7a:ca:5d:7f:7f:
2f:5b:73:86:1c:85:73:fd:fd:3b:d6:96:7b:aa:78:
e0:ce:57:a1:d1:7a:e3:65:1c:a8:f5:2c:d1:69:ca:
b8:76:02:ea:e5:df:6e:09:21:97:7a:61:c0:ab:12:
c1:fa:e1:17:17:46:51:40:e0:76:01:84:7c:52:03:
0c:f3:39:41:1c:8e:c5:2b:77:ba:04:ff:d8:4e:70:
cd:37:d9:db:fe:d9:58:98:f0:55:31:41:05:f4:da:
ab:b8:4b:72:60:e1:16:6c:75:ae:be:3c:bc:e3:f3:
0e:12:f2:05:d2:e9:6a:52:77:7a:75:76:db:b5:d2:
7b:5c:5c:2d:2c:7b:16:50:55:48:a6:84:57:17:39:
8a:24:3f:03:d4:98:07:8c:71:26:f7:22:05:8f:c3:
cb:18:c8:a5:7c:de:70:b8:38:f0:c3:67:80:f6:54:
6b:e9:73:22:ba:f3:07:ab:5c:bc:4f:7b:5a:73:36:
31:25:41:c1:20:23:32:23:6b:ae:a8:31:e5:cc:9c:
42:1e:a3:94:72:56:f0:cc:2b:db:96:fa:a3:55:48:
51:74:25:ce:6b:64:7a:2f:7c:91:fb:3c:d9:73:b1:
b5:11:60:af:c6:f4:69:db:12:0e:a5:90:2a:53:ea:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:64:E7:0C:82:6C:F5:A4:7B:41:DA:3E:85:B6:2F:97:A0:65:E8
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:39:3c:ed:09:3a:f1:92:5d:04:ee:cd:ab:d9:17:68:e8:9d:
5a:33:08:16:20:27:00:58:03:e1:5d:12:f3:d1:f2:5d:98:40:
4a:f4:12:93:48:f7:18:d7:96:5f:4f:b9:82:ce:22:a8:f5:e4:
07:8a:f5:52:12:1d:d4:d6:c9:7d:a6:15:02:5e:88:13:61:a7:
f8:0f:f7:13:8a:d6:4a:a1:6b:33:6f:c0:bd:d2:3b:b9:59:c4:
b2:8f:1c:66:f3:a3:99:42:9b:96:5f:c3:20:64:00:e7:a9:f4:
fe:22:e1:97:62:5a:00:c0:b5:f0:6a:3c:81:25:72:8e:96:92:
5d:7d:8b:5b:59:44:0b:e6:3f:0f:90:69:f5:eb:5f:dd:d4:60:
98:67:c8:66:c1:a5:90:0d:43:e0:16:af:87:dd:e4:00:4c:98:
b4:1f:82:4e:0e:38:0d:ab:35:4f:7f:01:7d:77:24:1e:20:38:
32:10:38:9f:89:3f:bb:ef:f6:e8:96:d0:eb:f3:10:47:96:fb:
03:5a:e2:c3:b4:4a:fd:48:29:bf:8e:9a:da:ce:10:1d:72:34:
b3:82:56:6c:83:a5:86:55:c7:5b:71:2f:3e:08:e8:74:6a:01:
81:8d:71:6b:1f:07:25:7d:34:9a:fc:80:b0:41:ac:34:86:b2:
cd:c1:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:04 2025 by rpki-client