Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: 8B9gpy9t9G2W1tawWzaB7dB9KHn6fOQlxnX+PZUsu+U=
Subject key identifier: C1:68:AF:94:C7:9B:D5:CB:3E:CA:E6:58:E9:04:63:EF:58:77:6F:C7
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0197B7EA454EB0A68CB2989D8B0D3C614F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0A2B
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: uo6jD1PAfRSZcT/GuX7RDMLc6emBJu5P/hUVNSWfHOE=)
2: K2QKbFHIrbPQHIm8s3ODKVNUlZc.roa (hash: wWrjDFQ0Y6Ae5UJU72q02nMygpERqME7z4/Cv+3ZVV8=)
3: junb4Hu7skcDtoWuQpLCf11hPIk.roa (hash: WDV6wqg1Z11gLdLlJ/tRkdmj0uUMTkoiQFmb7Lj/0IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:45:4e:b0:a6:8c:b2:98:9d:8b:0d:3c:61:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=c168af94c79bd5cb3ecae658e90463ef58776fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:0b:9e:ed:57:3c:b8:88:3e:ce:4c:35:04:
f0:25:b0:c0:94:ae:a8:9f:2d:b2:a6:27:89:9d:d2:
16:cd:6f:f0:f8:f8:72:5b:49:28:d7:b0:3e:95:36:
61:20:19:59:c2:71:83:cc:8b:89:9b:89:32:79:e8:
5f:38:91:fc:56:6f:e2:97:ea:66:f8:e8:31:6c:65:
51:b0:18:58:7a:b0:a2:34:6c:af:bc:a1:ab:c2:9f:
dc:c5:39:8a:2d:eb:a8:ca:1a:c7:e7:50:29:70:cd:
0b:d6:fc:f3:ab:77:0b:5d:a4:fc:71:bb:b9:7a:46:
e0:44:d6:02:da:69:bc:ab:e7:bf:94:c7:d9:bb:13:
b6:bc:9f:26:8d:3c:bd:6e:5e:f3:84:89:31:14:77:
ee:47:82:23:86:f7:e8:d1:3c:9f:3f:68:00:03:06:
1a:3c:8f:c3:b9:1c:51:9d:b9:33:5c:83:26:8f:04:
1c:5d:6d:2d:26:4f:d7:f3:76:90:74:aa:7d:44:23:
6c:3b:cf:d9:b3:11:58:85:5c:95:a8:43:59:1d:8e:
94:cb:d9:f8:16:63:e1:52:f3:30:d6:52:f2:61:a2:
fa:94:25:22:b3:b7:ea:90:1c:46:e8:2d:d7:59:b6:
74:95:37:5f:a8:e5:15:30:4c:29:04:23:68:57:e6:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:AF:94:C7:9B:D5:CB:3E:CA:E6:58:E9:04:63:EF:58:77:6F:C7
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:9e:76:51:1a:45:70:44:9a:7d:5c:ba:24:82:fd:1e:54:
65:35:e3:10:43:32:a7:30:27:d3:d7:19:69:c0:23:62:e3:d8:
73:74:d3:68:6a:c8:f3:86:10:44:d1:42:18:78:b0:36:eb:e7:
cb:a7:b8:a6:59:df:35:a8:09:e2:07:c0:60:3b:6b:41:c2:48:
10:00:ca:b5:c3:13:a1:6f:f7:99:f0:81:98:3a:dc:14:dc:70:
0e:91:43:b3:2d:aa:64:97:9a:3b:95:a9:49:28:44:8b:8d:4f:
e2:4a:8b:a1:b2:ab:ad:ab:e9:58:5b:cc:e8:3d:b6:0f:0d:bd:
68:a3:6d:32:a5:aa:c6:a4:86:5c:2d:ab:d1:cd:1c:10:fd:d2:
6c:8f:77:5f:10:c5:76:89:14:7c:21:00:1a:dc:ee:c3:b9:9b:
d1:dd:15:a3:92:6e:d1:15:26:69:38:b2:cf:f5:86:46:72:70:
9b:9d:0e:eb:5e:28:88:f4:4d:fa:56:b5:ca:49:12:07:56:e9:
19:92:a4:c7:cd:25:fb:90:ea:6e:83:ef:11:dd:86:a4:85:9d:
95:00:1e:17:0f:77:d4:3b:ef:a2:ff:2b:bf:29:81:d1:46:dc:
50:d3:f0:1f:9d:69:9a:bf:ec:0a:a3:1a:76:1c:09:d1:32:ec:
52:6d:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:16 2025 by rpki-client