Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: RsS5IoZdxaoYalYMvDdehiieG9Fc+CGGkbllpZDsN6g=
Subject key identifier: C0:8C:37:37:56:80:92:F9:11:2A:50:6B:C4:65:EA:3B:40:1C:E8:B1
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01977B2FD60D0EE7613B3468CD165474BCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1518
Signing time: Tue 17 Jun 2025 00:00:21 +0000
Manifest this update: Tue 17 Jun 2025 00:00:21 +0000
Manifest next update: Wed 18 Jun 2025 00:00:21 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: mKmmo/RrCFkvoHzos0c5r0uUSOnhgI/yFwQDuCKFlIA=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:2f:d6:0d:0e:e7:61:3b:34:68:cd:16:54:74:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jun 17 00:00:21 2025 GMT
Not After : Jun 18 00:00:21 2025 GMT
Subject: CN=c08c3737568092f9112a506bc465ea3b401ce8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:1d:14:10:d4:e2:53:31:ef:ce:a6:83:9b:
27:30:fc:54:c9:59:05:0c:9b:be:1f:c4:52:a3:1d:
54:63:15:04:94:3a:00:0c:46:72:a2:1b:3e:cc:3a:
48:d6:0b:51:ce:89:b2:89:30:18:f0:31:34:08:77:
01:a6:33:3b:26:95:49:15:97:57:c8:35:ff:25:d3:
9c:04:ff:03:9a:5d:e3:03:fb:00:ea:dc:d6:56:21:
a1:06:3e:dd:8d:9c:95:e7:01:c7:55:ab:71:cb:bc:
f8:e5:a7:48:fb:57:a0:5c:19:a8:1c:30:45:dc:d5:
76:71:a0:f2:c8:a2:c9:86:7a:01:00:a7:4c:c5:5d:
88:2f:c8:7c:94:34:ea:04:bc:0b:99:bd:27:8d:91:
26:9e:a9:29:53:ad:ac:e5:f6:c8:5f:6d:e4:50:fb:
00:13:75:fe:6c:89:7c:72:ca:46:5f:43:30:ea:96:
30:e5:68:8b:bb:2c:57:23:38:dd:99:99:af:74:84:
84:42:21:5c:7b:af:3f:f7:84:24:2b:f0:13:92:f1:
c4:79:e0:f9:fe:9c:60:a5:ca:94:90:5c:96:93:c3:
03:79:94:61:cf:28:8c:27:bd:a3:b0:3e:c8:a4:09:
d2:47:af:1a:48:ae:0b:a1:df:dc:5d:a6:f9:8c:12:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:37:37:56:80:92:F9:11:2A:50:6B:C4:65:EA:3B:40:1C:E8:B1
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:43:2a:8d:7a:3b:5c:13:e6:83:fd:91:26:9f:cd:26:91:
43:8a:bb:a2:0f:62:a1:2b:33:a2:1b:f9:d6:26:89:ee:2d:a6:
d6:e1:61:67:cd:7f:35:ea:d3:17:7b:c4:f9:f7:4e:08:30:ee:
97:aa:4e:7e:87:2f:c5:6a:06:04:b1:d5:00:bf:17:9f:8f:98:
a4:76:6c:ca:12:f8:77:91:18:97:d5:9f:c7:c4:a2:9b:c3:09:
04:6f:62:0c:d2:0d:97:ba:0a:1a:a7:81:92:1d:df:e6:39:e9:
26:fc:1c:5d:f8:54:b4:30:7b:c8:86:96:fe:94:99:89:40:6b:
cb:05:93:bc:45:a6:4e:8b:39:24:5d:8f:49:a9:ae:05:c3:fb:
56:56:00:22:16:82:a9:72:75:c3:a0:cb:f5:7e:87:4d:59:6c:
44:4f:77:00:84:9b:28:a7:82:6a:c2:54:82:c2:34:53:c8:3e:
6c:26:59:bc:6e:a2:4d:b2:55:63:a3:e8:f5:6f:2f:11:2c:ae:
30:54:d2:35:3b:cc:41:7a:52:ef:be:4f:b5:21:84:a8:ff:f3:
8f:f4:14:40:1e:42:aa:a4:fc:ad:c6:6a:b8:1c:df:af:8f:56:
00:97:72:c5:62:77:23:3c:d6:30:7b:74:95:bb:bf:e1:d6:4e:
86:09:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:37:21 2025 by rpki-client