Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: ef0Q/75R3wjV4m4IPSxhYQTFsicUME16yjvS0b9acoE=
Subject key identifier: C0:F6:22:91:60:EE:85:9F:5A:76:4A:7B:14:18:D2:44:41:8F:89:C1
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 0197B820F02C7F0D14DA084ECE25AC862FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 1198
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: poICWaONs1MezTcNNGMW/mzR7gM4TNkmrSJdhN/QcTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f0:2c:7f:0d:14:da:08:4e:ce:25:ac:86:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=c0f6229160ee859f5a764a7b1418d244418f89c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:dd:42:99:c5:51:8a:b9:8d:fe:ac:3c:93:
2b:94:78:38:18:3b:7a:ae:db:87:78:13:7c:9d:59:
80:c0:2c:a1:ca:b0:cb:3d:22:52:2b:a2:40:1c:4f:
c5:fa:7e:af:73:6f:0f:d9:a3:2f:ac:4d:bc:42:00:
ac:bb:a2:37:ee:86:3e:88:37:ce:b0:58:33:99:97:
27:07:10:b1:f1:ba:ed:c3:34:74:71:f8:2c:b8:cb:
1d:fc:cd:84:37:3a:72:f2:af:75:41:15:92:e9:2b:
82:f1:a2:d3:5e:97:1f:0e:fa:c0:a9:d6:8d:21:04:
22:76:cc:51:e8:1f:6c:0f:b0:1c:cd:d1:ce:d6:f8:
b4:11:27:cc:7d:c6:9b:c4:35:ae:1c:bc:44:0c:f7:
1a:d3:29:ac:29:82:c5:ce:45:11:45:c0:4f:de:70:
e4:ae:67:c1:e4:c7:df:de:67:85:88:28:06:cb:dd:
9e:95:7d:0e:b3:bd:3d:5c:4e:cd:d1:a6:39:4c:7f:
68:29:51:53:86:b4:2f:c4:bd:24:83:9f:a6:a8:43:
11:b4:c2:22:24:1a:3d:10:73:1c:6d:53:8b:45:83:
0e:a8:e0:4d:d1:f0:5f:7f:6b:3b:66:b7:d3:0c:42:
12:85:12:c8:c0:41:58:0b:73:6d:7a:2d:b4:5d:f6:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:22:91:60:EE:85:9F:5A:76:4A:7B:14:18:D2:44:41:8F:89:C1
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:f7:ce:4b:f0:dc:35:a5:8e:75:57:75:d5:51:32:fc:64:
84:10:0f:82:ca:de:fa:d6:46:95:e6:92:9f:3a:ab:d4:e2:36:
4c:b0:8e:8d:5d:b1:9a:7e:82:00:fd:11:5a:44:5d:d5:4c:e1:
74:fb:ed:79:77:d3:12:12:06:83:d2:08:ff:f2:64:5e:c8:cd:
b7:a3:76:1f:e0:9a:50:f0:92:16:ae:e6:4b:bf:55:c5:f9:05:
eb:b4:d0:6e:43:06:3c:de:ca:49:60:1d:02:8a:b5:2c:58:49:
f0:f6:78:4e:a9:33:cb:19:1c:5b:89:fd:88:63:41:62:c6:e2:
02:35:d4:3f:79:3c:98:2f:ac:65:f2:9c:15:6a:e7:5c:b2:a6:
79:12:09:eb:6a:c7:3c:fa:8b:59:f2:80:82:17:2d:cd:dd:4b:
2c:f7:38:2b:92:75:bc:c6:70:64:6b:d6:8d:91:79:0f:4f:fd:
47:56:f2:e7:aa:0e:75:b0:73:77:7b:09:fb:3e:b6:41:46:90:
a7:9b:1f:6b:3e:a3:32:23:4c:6e:33:50:60:cc:8a:5e:04:a4:
f5:18:83:67:28:c5:71:2f:2d:eb:9d:4a:a9:19:a5:5a:a4:95:
50:ea:59:09:04:ec:05:dc:4b:83:0d:77:94:f4:47:b4:45:af:
d0:50:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:34 2025 by rpki-client