Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: PDrQupJLl7dptFNifq2g8mS0tzkyYIortlM82/8OYNI=
Subject key identifier: 9C:E8:54:9C:7C:90:DF:8E:7C:54:8B:E8:73:E3:D4:CF:FA:D8:DE:1D
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 0197B6A168E90DFA5C062D63D58DFDB4E625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: GWMc/1x2MtRyYX7oaqaFBEvHMoOLME8EnTWflU8MVSI=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:68:e9:0d:fa:5c:06:2d:63:d5:8d:fd:b4:e6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=9ce8549c7c90df8e7c548be873e3d4cffad8de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:0a:e7:e3:78:e4:0b:8d:a5:af:69:b2:36:
c0:49:15:5a:bc:d1:03:57:d9:ed:84:94:7a:12:a4:
92:a4:47:02:3e:f3:9b:a5:90:f3:48:92:33:d1:7c:
36:4f:95:d3:4d:9f:21:a0:e5:dd:21:e3:54:4b:c8:
c6:be:f2:1d:84:8b:ec:f4:18:f5:27:15:52:c4:7f:
e2:68:71:f8:14:3f:71:ee:90:18:e8:8e:6f:a9:73:
7c:2d:04:a6:a3:59:eb:6d:f0:cc:5b:7d:9b:0f:60:
6d:5a:fa:c4:a7:85:e3:82:ff:be:8a:39:c7:dd:94:
ed:60:ba:1f:3a:01:24:6b:e4:9e:c9:af:3c:67:ff:
2b:07:f5:9b:b7:91:4f:f6:25:8f:7b:11:4f:db:8f:
5a:09:e4:0d:79:10:cb:89:94:51:01:bf:51:55:14:
79:b1:43:45:c2:7a:17:02:85:5d:8d:cb:2d:e6:e9:
51:93:cf:8f:12:02:d5:79:7e:cd:fb:a6:68:ff:ab:
31:80:c1:bf:49:f6:a7:90:3a:2c:5e:aa:7d:38:b9:
33:2f:25:2e:a7:a9:81:e6:de:01:e2:5f:7a:10:22:
b0:ca:02:54:1e:6e:dd:b6:ac:6d:f9:4d:9e:51:d3:
c8:b9:db:97:ee:57:95:4e:8b:b8:70:8c:6f:19:c1:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:54:9C:7C:90:DF:8E:7C:54:8B:E8:73:E3:D4:CF:FA:D8:DE:1D
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:63:f0:29:06:c2:8e:cd:86:99:ad:fd:f5:8c:96:26:cf:
a1:4d:94:9f:a9:0a:7c:31:8b:55:48:03:73:51:42:fa:78:80:
56:7f:11:fa:79:f3:6c:fe:21:61:10:a9:cf:f3:68:6c:34:74:
03:79:4d:95:7c:cc:f0:82:82:58:5d:29:f4:5d:7a:54:46:6b:
70:82:ab:78:b8:19:33:28:7f:30:cb:37:bc:aa:c9:94:73:4c:
d3:1e:fc:ef:94:fe:fa:99:af:09:22:03:a2:21:6b:b6:a6:b8:
bf:83:06:c0:de:ba:19:68:94:8d:a0:92:c0:24:0f:97:aa:bf:
d2:58:7d:70:d6:2e:78:cd:36:19:eb:c2:97:de:de:bc:aa:5f:
86:eb:5c:22:4f:6d:a2:0b:ca:9f:25:d7:a4:81:a4:48:14:ff:
95:26:b1:8a:75:20:c5:0e:d3:c1:30:67:61:d5:60:d1:9d:14:
a6:fa:37:1c:1f:e7:f8:5d:39:58:08:33:8c:4f:a4:2c:78:09:
02:bb:71:0c:d7:7b:3c:e6:f7:cf:e7:ef:37:3f:41:fa:bc:9d:
86:0c:76:07:73:bd:c1:e7:45:dd:00:60:c0:bf:f5:ad:ff:0f:
2c:fc:b3:a3:8c:b1:09:e7:44:2a:97:0b:d2:2a:83:39:9a:1c:
c5:a2:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:05 2025 by rpki-client