Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: j/2d+5LBVZYStGt1w/ltU80AMfirSmxOZIFiiCWIC/M=
Subject key identifier: 97:ED:18:01:96:09:F2:6E:D8:63:B6:C7:F5:61:E8:B1:6D:3C:B6:3B
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 0197B96A66EF3B046DFAE6ACE9A157A0B9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 12FC
Signing time: Sun 29 Jun 2025 02:00:47 +0000
Manifest this update: Sun 29 Jun 2025 02:00:47 +0000
Manifest next update: Mon 30 Jun 2025 02:00:47 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: xB3aobDm8Avi6LKUCY533zR3EK4qhqpU0xpRpYQQyK8=)
2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:66:ef:3b:04:6d:fa:e6:ac:e9:a1:57:a0:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Jun 29 02:00:47 2025 GMT
Not After : Jun 30 02:00:47 2025 GMT
Subject: CN=97ed18019609f26ed863b6c7f561e8b16d3cb63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:62:3e:10:4c:2c:00:d9:42:7f:28:17:0f:
70:08:38:65:48:0f:40:4c:83:8d:c0:89:08:94:f4:
86:19:e1:c6:86:8e:2c:bf:95:92:af:70:e2:a5:47:
4e:f0:ce:b7:c9:c5:e8:d4:46:c7:a6:03:fa:d9:94:
5e:43:0d:3a:bd:ca:5d:21:82:48:fc:3b:37:35:84:
28:00:69:cc:6c:73:94:aa:ee:5e:3e:5b:30:66:ea:
c5:d6:15:23:80:9d:9b:06:bc:0a:65:b3:6f:3e:56:
de:1e:63:07:f1:db:1f:93:1a:01:d7:5f:f6:ea:aa:
3d:b6:ff:dd:19:a9:ed:d4:36:15:8e:b8:d5:e3:3e:
24:ca:75:eb:7f:53:e2:e2:7b:d0:a2:b0:8f:78:d8:
f5:42:d0:3e:ef:8c:ea:c1:c7:b0:b5:6b:52:03:e3:
f4:f5:9c:31:32:c2:5d:40:93:18:ba:ee:99:f8:5d:
8b:1b:5d:00:80:88:62:0c:de:c5:a7:0b:33:6f:5a:
c7:b8:5f:cd:1f:b0:07:e8:ac:32:09:a4:1a:6a:b2:
7d:56:6d:08:7b:16:70:ba:3a:5d:8f:d1:1c:f3:d6:
7e:9c:09:a2:34:63:5a:c1:46:57:b6:3c:21:7e:16:
bd:00:54:8b:0e:be:aa:db:64:bc:ca:85:94:c7:4a:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:18:01:96:09:F2:6E:D8:63:B6:C7:F5:61:E8:B1:6D:3C:B6:3B
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:e4:07:37:63:2d:64:75:87:90:4b:17:83:f7:78:a5:ce:
17:cb:03:33:d6:ef:af:55:41:73:ec:1c:9f:9b:49:9d:39:fa:
77:2a:2d:6a:73:69:97:7d:1a:de:0b:26:8f:1b:a9:8b:57:a4:
db:21:c5:79:8c:be:c5:d2:d5:4e:15:66:03:12:37:75:c5:9d:
75:3e:92:43:72:a8:03:b0:07:c1:71:19:52:2f:49:01:7d:c5:
3e:96:e3:65:55:6b:34:f5:55:66:3c:d8:59:f2:1a:63:8e:40:
9d:a5:dc:bf:b8:5a:07:5d:3c:45:73:b3:26:12:f6:92:46:9d:
41:05:57:03:dc:db:cb:f6:44:fb:6b:87:f4:2c:93:c1:46:17:
a2:fe:f0:75:a2:31:de:b7:51:a2:2f:80:f6:be:53:d4:ca:23:
b6:9d:16:52:87:ae:8e:7a:65:e4:70:96:38:46:0b:ac:30:b6:
90:83:1b:7a:b4:0c:73:7d:fd:46:b2:be:d7:47:97:75:0a:17:
a3:25:e3:d9:37:94:fa:59:6d:17:03:e7:64:a9:12:66:46:55:
89:7e:b6:a7:99:9d:2a:4d:ae:6b:ac:e5:27:2b:60:8c:6a:eb:
b4:28:ba:9c:cc:df:fc:2d:27:86:ed:fa:64:18:2f:13:d1:cc:
a2:85:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:40 2025 by rpki-client