Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: e8VJFpAInTzxMqfqIkQkVa2KA+iwp300VspWp0FaMoI=
Subject key identifier: 5E:D7:60:48:D8:E0:E3:B1:A7:E6:8C:C0:36:D8:B2:CA:AE:A0:8C:F8
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 01976D74919F6B6C676391794EB023867B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 0880
Signing time: Sat 14 Jun 2025 08:00:45 +0000
Manifest this update: Sat 14 Jun 2025 08:00:45 +0000
Manifest next update: Sun 15 Jun 2025 08:00:45 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: xp+mYJOghgMrvZdGff1CoAglrrNAIdwlxFTQ4F0Yh5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:91:9f:6b:6c:67:63:91:79:4e:b0:23:86:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Jun 14 08:00:45 2025 GMT
Not After : Jun 15 08:00:45 2025 GMT
Subject: CN=5ed76048d8e0e3b1a7e68cc036d8b2caaea08cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:fe:25:23:87:b5:52:6e:b5:79:90:f4:e9:
7f:d5:c4:ce:28:90:86:54:3e:17:2c:21:8f:5f:f9:
9d:dc:66:90:0d:c2:f4:2e:85:a8:2f:b6:31:e4:ec:
83:4c:9d:55:3a:a8:29:8e:95:a6:15:f3:93:9b:6f:
1e:f3:6e:99:db:98:06:6d:d8:48:6f:06:01:44:64:
14:5f:80:ca:19:80:5b:08:eb:16:0c:3a:ec:75:9a:
82:3e:3f:f3:fa:9a:18:e7:1f:90:1d:aa:7c:f5:75:
47:af:7a:1f:1d:5d:08:ff:e9:53:bf:30:a4:a3:92:
9f:95:31:6c:cd:69:5d:25:e2:06:be:ff:61:ad:ea:
31:c4:f2:05:bc:c7:ba:39:22:e6:cc:f2:bb:9c:32:
ae:ca:28:5a:5c:8c:f4:8f:37:c9:5d:01:9e:2b:37:
c2:51:f7:30:85:25:42:7f:24:13:2e:e7:22:68:4f:
cc:aa:e2:af:3d:40:b8:17:aa:28:b1:ea:d6:17:ef:
de:10:37:92:9c:fa:ef:36:c6:77:35:9a:4e:55:bf:
12:68:85:e9:fd:e8:93:36:25:e3:8f:52:d6:b6:b0:
b5:7a:d9:ba:00:a7:bc:36:0d:53:d5:11:8f:d5:5e:
53:f7:c9:4b:50:4e:52:c3:51:3e:7f:14:1d:96:79:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:60:48:D8:E0:E3:B1:A7:E6:8C:C0:36:D8:B2:CA:AE:A0:8C:F8
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:5a:1a:33:2c:7f:e3:c5:ca:f0:80:66:90:0b:df:e6:7c:
87:f0:71:6b:47:91:a5:75:1e:a2:08:fe:3c:aa:a9:e9:d2:6a:
f4:a4:de:35:1a:29:7f:ff:8d:21:8f:33:e3:83:9f:bb:15:3c:
c3:c4:85:85:07:e6:04:a3:d3:1a:6e:e3:69:5b:e0:4e:ef:ba:
23:71:d1:32:bb:7e:6e:41:80:d4:63:3a:91:b4:4a:26:d4:dc:
72:4b:60:c7:3e:41:e9:15:92:30:53:89:ec:1b:8f:c6:27:f2:
3a:7a:ff:fc:35:d1:00:6e:80:f0:e0:47:6e:c6:9b:ac:c2:24:
8b:6d:22:10:85:fb:fb:0d:e1:36:cc:91:3f:b0:92:13:09:ce:
20:f2:2d:10:15:8e:ae:6d:74:0f:f2:32:1d:85:a9:17:03:45:
af:a7:74:7b:f0:e6:1c:68:a3:6b:9b:09:0b:d6:8b:a2:b0:cd:
1d:3c:85:54:17:26:02:de:9b:d4:9a:64:0a:9e:a8:32:00:0b:
88:67:69:21:86:4b:7f:12:a9:44:96:1c:19:f6:9b:68:aa:1f:
81:a7:db:e3:ca:94:fe:2d:31:e1:58:8a:ec:9d:d9:39:bc:ba:
a4:23:5e:fd:e2:ff:a0:1d:dc:e8:75:ab:f0:64:06:94:e7:f8:
87:a5:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:12 2025 by rpki-client