Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: leKPlfsPdSGyo/DMLTItfWzWByBJ+Sz6L3/3wccaG5I=
Subject key identifier: 4F:76:A4:8D:C7:F8:3B:AD:0B:90:8D:7F:79:3C:44:EB:04:95:F5:4C
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 01976D3E915913A7511AFB408B2A8B74D409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 12C2
Signing time: Sat 14 Jun 2025 07:01:46 +0000
Manifest this update: Sat 14 Jun 2025 07:01:46 +0000
Manifest next update: Sun 15 Jun 2025 07:01:46 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: LH+j6C9Fk0IJZad/47Fph970kdTXiRKZx+6/U/0blpc=)
2: dc8PgnhayzDZSzqf3yg7QDbNGi8.roa (hash: J+tA+61lQEEvu8m1aPgIRjodULbBtcVS6a22ypCO1hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:91:59:13:a7:51:1a:fb:40:8b:2a:8b:74:d4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Jun 14 07:01:46 2025 GMT
Not After : Jun 15 07:01:46 2025 GMT
Subject: CN=4f76a48dc7f83bad0b908d7f793c44eb0495f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:ff:15:dc:e8:02:ff:30:c8:43:d5:a5:e5:
9c:05:9d:89:a3:ad:fb:09:93:1f:ff:c8:1e:20:97:
2b:33:38:70:42:d6:63:7b:f8:9d:06:2e:c5:ef:68:
f4:50:a1:45:bf:87:07:05:d2:fc:be:42:5f:c7:84:
b4:f8:8d:8f:9e:70:a1:fa:ce:28:6e:3e:1c:86:d9:
62:e5:e6:70:27:3f:36:6d:05:46:df:5b:2a:54:d2:
a4:07:5a:ea:a1:3f:00:a2:8d:d8:e9:4c:e4:10:34:
a2:d2:d4:eb:f1:a3:49:63:0b:c8:a0:5c:6b:32:0b:
f3:f5:06:c9:f0:f7:68:5e:12:7f:68:c1:f4:f7:b6:
7d:79:1d:f5:ba:24:cc:c1:c6:08:7f:a1:2f:c0:0c:
f5:53:13:9f:a9:e1:19:39:1f:03:e1:04:d9:e0:6c:
48:3a:b5:ff:1e:5a:a7:de:4b:96:60:ec:10:d4:e6:
e0:5a:0c:4f:02:a3:08:e5:fa:fb:e7:1d:95:a0:52:
6c:8c:56:4d:dc:1b:81:22:dd:9e:8d:01:10:f5:8c:
27:92:c5:ee:0a:9e:e0:77:78:f2:71:bb:72:e4:ed:
75:9a:63:f6:90:5c:4f:55:c2:7a:6a:6f:77:5c:c9:
11:bd:c6:41:c2:0c:da:ac:41:f7:cd:02:71:56:d6:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:76:A4:8D:C7:F8:3B:AD:0B:90:8D:7F:79:3C:44:EB:04:95:F5:4C
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bd:e5:25:b8:45:7c:55:55:79:67:81:b7:48:66:48:93:f5:
f1:4e:1d:03:7a:a7:9d:28:10:8f:b8:2a:7b:44:60:70:35:f7:
2a:29:fd:b8:a8:ca:fa:b3:b0:85:ad:d9:60:d8:de:b3:04:d9:
40:d4:08:87:30:e2:38:ba:f2:cb:54:1c:73:0a:61:92:7a:0b:
ef:a5:19:cd:08:11:9d:d8:61:30:c1:72:40:10:ce:04:77:dd:
00:d9:73:34:fd:9e:32:5c:d4:ce:ab:6d:bf:f7:b9:db:5f:02:
58:e2:20:ac:2b:00:5e:32:24:be:2c:0b:78:99:c8:33:3a:79:
2b:64:6e:e0:05:22:11:91:a4:f8:81:bc:54:62:a6:71:d0:6d:
c3:bc:e4:f9:7a:49:12:4c:73:dd:68:30:ee:e4:21:cf:ce:da:
14:41:dd:e8:09:83:51:e4:de:88:c3:e6:40:e8:fe:4a:67:4f:
4e:9d:6d:c2:bd:03:b0:97:25:4e:7e:76:05:52:ed:42:bb:4f:
58:6c:38:d4:49:74:2c:68:c1:42:f3:5e:44:0c:e8:9c:23:37:
6b:b8:cc:da:63:66:45:2f:a4:87:ab:45:f7:c1:fc:40:7f:f4:
dc:3b:19:af:7f:1d:8b:1e:49:b6:fa:d7:d4:37:3f:65:3e:9e:
99:bf:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:53 2025 by rpki-client