Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: N8LAhWytxdqDCXFRGGLLQkLaWSQ02NMjpP+aSITzoYo=
Subject key identifier: 25:4A:BD:DC:D1:86:DB:2D:0B:E2:B9:BA:DF:BE:59:C2:AD:22:7D:62
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 0197B70F0238A3C03315D4A8CEFCBED0EF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: 3yiqsKCKnIPA9CFhzRLqG8RB6O8kH35Ecb6qQL3i2VQ=)
2: OPRG5qVik0clg7wkwnl7SUN9jY0.roa (hash: ZN4J6ol4OC/X57nz18jc3tVUWSo2XvbIumwEP6WKJXU=)
3: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:02:38:a3:c0:33:15:d4:a8:ce:fc:be:d0:ef:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=254abddcd186db2d0be2b9badfbe59c2ad227d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:0b:14:7e:e6:d3:c5:8b:da:a7:b6:3f:fd:
25:b7:8c:9a:d0:68:2e:8b:0b:5e:fc:33:65:dd:86:
6e:07:04:35:d3:1d:63:ca:f5:57:65:a0:03:7c:9d:
c2:2f:f7:30:fc:ac:e9:28:8c:33:ad:09:66:32:26:
39:2a:3a:83:1f:33:e5:17:dd:0c:f0:43:d0:c3:48:
24:6e:2a:d1:6b:e1:d6:fa:64:3f:1c:d3:2e:9c:4d:
c0:98:88:44:41:05:ef:32:5a:f5:59:dd:5a:d8:01:
3f:dc:e0:73:69:3b:0a:d8:27:c1:2c:bd:a4:6c:f6:
1f:c6:d3:19:60:7e:4c:fe:e8:93:f7:bc:46:61:e8:
52:d9:48:d9:74:39:31:b8:cb:f6:1d:fe:5c:d4:36:
af:59:a4:bf:65:f5:21:0d:92:69:73:c9:93:11:42:
01:7c:05:92:c3:b0:de:da:74:7f:1d:15:b8:af:77:
75:a8:9c:3b:34:4b:8a:ba:a3:c1:de:f6:29:83:c5:
44:8e:b5:30:0a:d3:88:0f:8f:bd:39:d1:07:23:d8:
1b:4d:76:1a:da:f1:9a:e3:34:69:53:4a:9e:7d:fc:
09:21:e0:ab:c9:71:8f:a5:d9:24:b3:51:0d:c0:61:
0a:a1:dc:7f:03:00:fe:e2:e4:84:bc:50:65:73:77:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4A:BD:DC:D1:86:DB:2D:0B:E2:B9:BA:DF:BE:59:C2:AD:22:7D:62
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:86:31:28:f8:c6:da:53:66:46:0c:24:a5:db:0f:61:1d:
6f:c3:25:cb:c6:d3:1b:f1:45:66:5c:8a:86:35:67:de:94:3f:
da:37:cb:15:a0:1a:a1:b0:ba:d3:e6:98:29:3b:6e:45:24:54:
28:70:83:f8:c6:5c:80:9c:3c:6f:df:36:39:3f:45:ef:d1:16:
eb:2b:c6:5f:f0:00:1c:97:f7:01:d6:da:db:26:13:30:af:0b:
af:be:dc:ec:54:e0:78:73:e9:15:6d:81:18:aa:0f:8f:a4:aa:
23:11:97:29:b3:52:43:34:92:1a:ac:7d:a8:ff:e2:b4:26:c4:
52:6b:03:a6:38:3e:09:7f:c9:14:8c:9e:7c:dc:8b:39:ae:8e:
58:a9:87:ed:8e:4d:0c:b8:d6:30:fa:89:cb:28:80:60:ce:67:
4e:fa:49:9e:a4:9b:bb:de:80:a6:c6:36:f6:9b:aa:c5:5f:65:
0d:d5:26:11:f1:00:81:a3:66:ae:7d:86:fd:cc:71:34:2e:24:
4d:50:07:61:1c:82:6c:33:3b:5d:d6:55:c2:30:e9:17:4f:31:
9e:02:d8:9e:81:49:33:4a:0b:41:83:4c:7f:81:d2:82:fe:c4:
88:d3:4c:0e:78:4d:57:3b:ab:8b:03:0f:61:e5:bc:7f:6b:d4:
3c:50:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:38 2025 by rpki-client