Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: kZkrmuYU8ZP2/eOmgBLqulgTZ0uD7OABR41fHFbBIuU=
Subject key identifier: 87:3E:B3:54:22:45:45:43:91:7D:C0:98:0A:B3:A7:90:9C:2C:17:59
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 0197B7B32E400DB40D8BBD9DC457C6FBF1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: uZfJ/v9VlacmSzXqiwsyXm/fQS1Yj5fgf1qBnSaOwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2e:40:0d:b4:0d:8b:bd:9d:c4:57:c6:fb:f1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=873eb35422454543917dc0980ab3a7909c2c1759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:97:2a:0f:ae:03:97:72:51:fa:b7:b7:2a:
7d:5b:df:fc:f3:98:b1:4f:3c:6d:06:8c:ca:3e:6c:
e5:0e:c9:14:61:2c:c1:a2:e7:4d:7f:ed:e9:a0:b2:
42:b3:a6:35:f5:b2:fd:6a:45:33:1e:bf:14:af:dc:
33:a0:5c:35:b1:4b:99:3e:a0:af:63:e6:20:11:3a:
5b:ba:99:b4:4c:5e:49:3d:2a:0c:5e:3e:bf:b0:45:
18:c1:dc:cd:c3:c8:8e:00:75:7e:17:5f:93:b4:dd:
7c:7a:7e:34:d7:87:ab:75:79:c1:3b:ea:7d:ec:15:
8e:cb:6a:12:b9:32:f8:c2:94:6b:66:b6:ee:fc:a9:
98:4c:9f:31:7a:18:d5:e6:14:5c:2e:0c:2f:00:81:
68:8e:24:3d:2b:3b:c5:f1:16:dc:9a:a7:4a:74:a6:
9c:76:89:98:05:b1:26:f2:39:85:f2:01:b2:c9:16:
17:c7:c8:a5:59:d9:9b:7e:57:91:ae:62:83:a4:ac:
b3:29:34:bc:e2:83:98:4a:9c:3e:01:03:67:97:1a:
93:ab:7c:e2:29:83:91:47:d5:fa:61:6f:a7:fe:29:
c6:1c:34:d3:7a:07:c8:b6:17:59:d6:3c:f7:7c:f0:
ec:4d:10:af:30:42:dd:93:b7:34:19:8f:7a:0d:89:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:B3:54:22:45:45:43:91:7D:C0:98:0A:B3:A7:90:9C:2C:17:59
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:70:c7:1c:9c:fe:25:dc:3c:36:35:03:11:13:b4:e7:1d:
e0:7c:78:ac:df:20:43:36:54:a2:9d:1e:84:10:d4:b1:0c:96:
7d:4a:52:b0:f5:b3:09:1b:b4:e0:ca:e1:df:4d:64:4d:13:9e:
24:c9:5d:36:48:4f:d6:b0:60:33:9f:fd:6b:fd:8d:a7:44:13:
df:30:a6:96:ff:c7:08:98:77:a6:7a:a5:94:3d:33:41:d7:21:
4c:3f:f8:91:7f:20:80:3e:8d:ac:86:97:35:86:b9:58:6a:37:
fc:f0:98:ae:c7:24:d8:4a:c7:cb:27:dc:1f:c0:99:75:b5:f5:
93:53:ac:c4:bb:7d:f1:2e:5b:b0:06:77:1e:4c:09:b9:c1:9d:
91:5e:e0:8c:53:0b:01:af:1d:0f:01:3d:8d:91:03:57:0e:9e:
e3:73:79:71:85:87:2f:e0:01:e4:37:72:c8:e3:2e:c0:47:13:
f7:42:1d:ee:5f:67:0a:4a:60:f3:92:c5:1d:f4:4a:1c:84:d9:
37:e8:c6:c9:2d:f0:64:b6:6a:cd:66:20:be:ff:fa:a7:f1:dc:
5f:9e:be:5a:e6:1b:18:49:e1:79:a9:fb:32:c0:cf:90:80:63:
64:e6:5a:a9:1d:04:55:45:13:28:d2:ab:7d:e8:9d:d7:b6:88:
ec:e7:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:45 2025 by rpki-client