Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: EmiH3poXALRtGjOteocNGs1Yk/s1cyckYYSJLKedj/I=
Subject key identifier: 4C:87:7A:DF:62:4B:B4:0B:3A:B5:89:51:01:C3:C7:62:95:BC:57:15
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 0197B77CBBAC6684DFDD26212B8A141D4939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: /a46RZflgFsaapI9o1sWhrWGQvkWsidBiDadclvSBAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bb:ac:66:84:df:dd:26:21:2b:8a:14:1d:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=4c877adf624bb40b3ab5895101c3c76295bc5715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:64:4c:d8:20:e3:78:a8:5c:f0:7e:68:2f:
b1:46:80:98:5e:99:9f:86:a9:a8:75:7b:64:3e:2a:
3a:c3:a5:5d:68:52:e2:b1:66:f1:9f:e1:92:44:bc:
75:ef:ca:86:62:51:94:fe:20:c3:67:3a:58:ed:c1:
6c:d5:fb:d4:54:35:bd:c4:f9:36:c4:f6:e4:10:93:
e7:05:6d:30:3a:cc:0d:00:5e:de:12:0a:34:88:e6:
33:d7:50:dd:d8:af:3d:db:14:cf:8d:2e:17:1f:9f:
e2:aa:9f:a5:5b:d0:b4:ff:2f:9d:27:8d:43:d6:2e:
21:fe:37:c1:30:9a:d7:ca:3e:9b:00:c1:c0:7b:7f:
84:2a:0b:ff:28:0a:54:b5:73:77:1d:c4:20:cd:1e:
6f:c2:1f:f7:59:d2:13:f9:52:6d:70:be:da:ca:6b:
67:07:97:bb:e9:54:51:7a:b9:70:5c:e3:7d:69:03:
91:ac:9d:0a:2f:a3:54:37:78:6d:76:04:cf:fe:de:
d7:4a:4b:6e:e9:b1:cf:7b:3a:fb:5a:44:2d:d2:17:
57:bf:8f:c5:5c:bc:e1:1c:6a:d6:da:19:d7:e5:dc:
48:54:e8:49:42:83:b2:cc:bb:6d:c7:ec:58:d1:b1:
d3:9a:f4:6c:f1:0f:49:cc:4e:cd:a3:76:0e:1b:d7:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:87:7A:DF:62:4B:B4:0B:3A:B5:89:51:01:C3:C7:62:95:BC:57:15
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:39:5f:a6:d5:f6:d3:6a:fc:bb:52:e8:71:25:54:a6:e3:60:
f8:fd:05:4b:1a:ba:6f:cc:c9:30:d8:88:ea:18:96:c4:d8:5e:
b3:f3:2c:a6:7f:f9:8f:bb:0e:10:57:93:31:ef:d8:45:92:07:
de:63:dc:55:50:67:c3:e5:0f:67:dd:17:0b:b3:0c:3d:9b:e0:
2c:16:98:8e:84:62:6b:9d:e5:01:d6:a9:fa:71:af:59:31:ac:
40:89:c4:80:75:94:4c:39:9a:79:25:d6:ea:4f:02:a4:50:81:
fa:bd:84:c6:88:c3:4b:c0:e8:7a:aa:da:f7:c8:fa:24:3f:ec:
28:37:f6:90:90:72:a2:1c:30:be:22:64:d0:ea:a8:51:82:5e:
48:98:67:27:df:b7:4d:ce:d4:52:08:35:ec:0a:82:e4:89:2c:
6e:9c:c3:78:77:fd:af:ba:51:96:0a:5d:32:f8:f7:29:28:ea:
01:5a:95:3a:dc:0c:91:9d:c9:17:0f:47:b5:c0:c6:b9:f5:2d:
e8:b4:c3:09:a4:98:dc:18:37:0f:55:de:af:f9:5a:ba:0a:31:
f8:40:e7:a0:41:db:ac:fa:7a:0a:78:e1:c3:93:79:7b:ab:8d:
8e:c9:89:30:26:01:a2:81:46:fc:92:e3:51:d0:09:ec:3e:2b:
d8:98:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:59 2025 by rpki-client