Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: GitkWfGC+hj0wGvvRsuEP9MClR9CddumVTJdgbfJCnM=
Subject key identifier: 0D:DE:78:F6:CB:4F:5F:87:6E:8F:C4:53:86:8A:09:8C:83:FF:0A:FB
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 0197B7B367273FF67F9A3143C6D80735CC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: XsWkFYs2CF1l09s9xsRNRdKurKwnINk9qbKdE/9Wkqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:67:27:3f:f6:7f:9a:31:43:c6:d8:07:35:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=0dde78f6cb4f5f876e8fc453868a098c83ff0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:70:5a:bd:4a:87:d8:5f:ce:b6:44:d7:bf:
d8:01:38:ef:79:9a:65:17:64:aa:f1:2c:8c:bc:fa:
96:37:16:e8:4f:72:9b:d6:e2:c0:05:cd:33:8a:a9:
d6:b8:7f:a6:16:47:00:d4:09:48:df:16:f7:c6:4d:
8e:95:29:0f:e7:71:93:14:d7:66:b9:37:96:dc:74:
04:08:b6:c4:b8:66:ea:51:8d:09:89:e6:d4:da:ce:
64:a0:ba:da:a6:55:5e:17:ec:4f:be:e8:8e:94:3d:
2d:8a:c9:31:98:e0:63:46:bc:f6:19:3e:f2:81:23:
d3:13:5f:80:c9:41:e3:7e:d6:2b:14:fe:1f:e1:ad:
23:e8:4b:38:c8:a3:2b:94:b2:62:20:bb:d6:24:c5:
c3:9e:f9:2f:29:a6:07:e7:77:ce:f7:4e:9b:c2:41:
23:a8:2e:e2:cf:b8:6a:3e:b9:60:48:49:00:78:20:
da:fe:18:52:1b:9b:8e:ea:7d:e5:c8:ef:30:7b:99:
92:df:fc:d6:b7:34:a2:61:3e:a5:8f:42:1d:9f:cf:
7b:37:9f:64:cf:e9:c9:d7:5a:3d:04:15:6e:55:73:
b7:d6:2c:c4:f8:58:ad:fd:7b:3d:0d:d5:24:45:01:
bc:77:fb:7c:06:63:47:73:b7:6d:00:22:dd:0c:e9:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DE:78:F6:CB:4F:5F:87:6E:8F:C4:53:86:8A:09:8C:83:FF:0A:FB
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:92:bb:b9:ed:ff:5f:60:aa:46:47:12:99:4f:c6:32:f0:
a7:73:2f:ae:b9:06:e8:ed:73:7f:04:5a:01:fb:39:df:1f:f6:
64:28:7b:20:90:83:0c:e0:96:cb:6f:85:f7:0a:84:d9:3c:8c:
27:d4:e2:cb:2a:c6:49:23:63:b6:36:23:2d:49:00:ed:1d:07:
15:84:b6:c3:05:4c:9f:3e:0c:e0:ef:71:8a:c7:2b:8a:f0:df:
d9:a4:ba:ec:43:7e:42:31:68:3c:96:c6:b6:75:8d:f4:af:80:
4b:d9:90:ff:b1:ea:1a:d2:ed:84:58:4e:ee:c0:32:01:55:53:
86:30:c5:3f:fe:d9:22:c8:4f:7f:b8:cb:e9:12:ee:9a:17:0e:
d9:ab:89:18:a9:13:6d:a1:3b:f9:42:f6:23:6e:9f:05:bd:03:
0d:f7:20:c0:f2:64:4b:fe:30:7b:e9:f6:c9:bf:e6:9e:65:7d:
31:58:c3:1f:c8:f5:93:69:49:51:1a:c3:2d:e2:2d:24:37:50:
a2:dc:00:5f:bc:86:43:2a:b8:73:5c:f2:3d:34:38:65:71:a9:
9c:e8:af:f5:e3:9f:13:17:ad:8a:a3:41:1d:7e:0e:44:b6:2c:
70:f7:eb:fd:e9:19:aa:dd:78:6b:2a:91:34:23:dc:22:f0:25:
ba:87:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:17 2025 by rpki-client