Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: SaP4B3LDEG76ch8UYYpBL+3QBFmUndAfpSMn7Ln3jtA=
Subject key identifier: 43:62:85:C4:9C:9C:8A:E6:FD:A0:0F:E1:B4:8F:23:92:1B:AC:1F:4E
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 01977E9EF49D435827F2633F7F373114A3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 16:00:35 +0000
Manifest this update: Tue 17 Jun 2025 16:00:35 +0000
Manifest next update: Wed 18 Jun 2025 16:00:35 +0000
Files and hashes: 1: gWFI607GT4diptK6z6klQ2oZYkU.roa (hash: H46kA3fqfVNyrqG30wfIQclN0fJfVoNQ86D8lIAtPgI=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: A29eBuMZEnj2zzEFr5mDlyFHIGtyzYuPHBNMxcX6lGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9e:f4:9d:43:58:27:f2:63:3f:7f:37:31:14:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Jun 17 16:00:35 2025 GMT
Not After : Jun 18 16:00:35 2025 GMT
Subject: CN=436285c49c9c8ae6fda00fe1b48f23921bac1f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:f5:34:45:97:40:55:23:be:84:cf:16:b4:
b0:b7:86:f9:b4:1a:8e:3a:a6:2b:97:ab:25:06:31:
fa:86:88:96:43:15:24:29:ef:24:5b:ed:83:23:62:
4c:0b:5e:f1:8e:25:39:4e:8f:52:c4:9f:e2:b4:c4:
19:32:0f:06:31:1d:c5:f5:ab:58:d5:36:65:ac:15:
55:3f:2d:25:17:ca:ba:3f:5e:58:a3:e0:92:67:d8:
ff:32:fa:fc:60:e9:2a:2f:11:01:64:76:ea:63:27:
5b:36:6e:d0:b6:39:5f:34:49:f3:37:72:12:62:91:
ec:6d:a9:ef:4e:b5:54:30:52:77:60:20:27:1a:7d:
26:89:b9:3a:03:8e:a5:1c:83:12:f8:31:b8:f3:e0:
f5:51:df:1a:f4:57:bb:b8:be:15:f0:9e:0d:72:b4:
3b:69:ba:31:34:61:d4:12:fe:83:45:d8:fb:bd:7e:
a0:74:46:71:97:91:88:b5:e0:ab:99:6f:34:c6:f7:
e8:e9:b5:a5:c2:4e:da:bb:25:26:3d:26:c9:ec:99:
b3:f6:b5:b5:ea:57:7c:34:81:07:20:e6:d2:31:a3:
78:ec:7d:fe:a3:7a:82:d2:17:50:fd:24:cd:95:9a:
fa:c6:09:b6:bf:8a:19:51:fc:52:e1:bc:bb:51:0f:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:85:C4:9C:9C:8A:E6:FD:A0:0F:E1:B4:8F:23:92:1B:AC:1F:4E
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c2:ab:0e:0d:36:08:d8:70:04:99:5f:71:2f:c5:d0:c9:4a:
3e:b4:22:01:57:9c:74:68:33:07:73:cc:d1:24:fb:29:87:90:
c0:29:cf:6e:1b:ed:07:7b:b5:b0:93:0d:ee:b3:40:26:8d:dd:
74:e2:f7:eb:86:cf:f1:11:80:31:ee:63:fa:81:fd:c0:a4:15:
54:24:f6:8e:6c:4b:cd:99:31:51:74:75:fb:57:f5:e9:a2:74:
12:73:28:8a:80:c9:5b:37:2c:47:93:86:97:21:0b:01:56:f4:
6a:69:17:5c:fb:63:df:3a:22:7c:29:27:b3:64:1c:68:e6:0c:
94:0c:b6:79:3a:6d:27:c1:12:97:dd:c9:8e:96:c7:f5:c1:4a:
68:6f:5b:c0:76:47:6b:fb:76:8a:ed:c9:0e:5d:d2:c6:5d:0d:
27:0f:f2:2c:81:63:43:3b:08:4f:ff:44:2b:0b:ba:7e:57:44:
71:ef:ba:79:64:c3:0e:34:cf:b7:19:6a:71:d3:d6:30:da:30:
23:2d:4a:73:00:ab:77:21:66:88:68:39:cc:7f:88:53:7c:f1:
21:8d:0a:39:52:e7:ed:48:89:be:ae:5b:d9:ae:a1:ce:21:47:
42:71:63:9c:a3:ff:4a:ea:3b:30:8c:3f:6f:74:17:9c:c4:69:
0a:6a:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:34:44 2025 by rpki-client