Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: bmfMQE5PLzgild7wsyUm4UWZ8Mxm+Wp4oCR7tmJBjfw=
Subject key identifier: 08:1A:A9:01:98:E7:E3:87:46:3B:71:6E:ED:6C:1E:F3:46:8D:8D:82
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019774F7BD129A55A4847E30B9A0726E998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 19:01:22 +0000
Manifest this update: Sun 15 Jun 2025 19:01:22 +0000
Manifest next update: Mon 16 Jun 2025 19:01:22 +0000
Files and hashes: 1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: Ng2xEq1RlUbzaVJYWRpNKT+cOhLtzgozwWJM7aCJnA4=)
3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:bd:12:9a:55:a4:84:7e:30:b9:a0:72:6e:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Jun 15 19:01:22 2025 GMT
Not After : Jun 16 19:01:22 2025 GMT
Subject: CN=081aa90198e7e387463b716eed6c1ef3468d8d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:a6:d5:8d:35:46:76:f8:25:e3:9d:a6:f8:
74:21:34:1d:fd:78:92:38:34:53:d7:98:91:ea:be:
f5:1b:fe:88:0c:85:5d:8d:44:01:15:e0:ec:e4:d2:
c4:58:c4:43:1d:63:6f:11:0c:11:0f:d0:27:97:12:
94:e5:6b:83:f2:b6:2b:5a:34:08:83:6a:88:a1:93:
47:72:31:50:24:37:7e:1a:9e:43:0f:d5:7a:61:d4:
02:17:5f:cf:fa:6c:eb:b2:bf:05:a0:62:f7:d5:25:
9b:cd:8c:70:f9:a9:84:89:db:64:5a:57:44:25:a8:
b7:80:73:a7:60:b2:d9:ad:e7:60:35:e7:ce:8f:2d:
9d:fa:80:15:55:be:d0:41:08:c7:89:db:77:0a:2e:
bc:45:b3:a5:9c:a6:3b:f6:a5:93:71:da:fd:c9:e1:
38:87:ab:5f:ef:af:e3:21:1e:f4:59:b0:55:a5:53:
6a:66:3e:bd:91:7b:fe:27:c3:f9:10:16:91:da:de:
3c:d8:ee:30:37:e2:e5:b3:d6:5e:c5:72:14:59:b6:
a5:74:19:6f:16:d9:c1:1a:dc:ab:63:dc:94:ea:fb:
2d:af:86:07:11:d2:f9:b3:cf:f8:fd:f2:6f:f6:3d:
18:bf:b3:8f:a6:b7:f5:b0:6e:4d:75:d9:15:33:b3:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:A9:01:98:E7:E3:87:46:3B:71:6E:ED:6C:1E:F3:46:8D:8D:82
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:b9:5d:56:3e:1e:d5:37:9e:07:24:68:db:be:60:91:db:
e4:ed:49:95:3d:dc:f7:c2:8b:5b:57:17:81:c1:cc:80:56:38:
4d:30:63:c8:7a:d5:90:31:b4:d6:af:f9:95:2e:9b:7b:3a:dc:
6a:20:5d:ca:18:fb:bd:64:c7:a1:6d:e5:8e:ea:88:83:06:44:
24:03:18:54:b8:d8:fb:64:9d:0e:ce:46:a9:3a:3f:77:16:3e:
9e:4b:bb:c5:5c:0e:f7:9c:ba:a3:7c:b5:85:b2:cb:61:7d:ca:
2c:e1:c3:e4:d0:bb:54:c0:b8:4c:05:9e:6c:fa:34:c2:01:ae:
a7:69:91:e4:6d:fe:c2:03:de:87:d3:e7:f6:fd:99:a9:99:fc:
09:4c:7b:e2:bd:45:2b:33:1b:b2:c6:48:29:69:87:0e:2a:4b:
65:bc:bd:1f:6a:93:fe:85:91:0e:81:45:d1:eb:a8:4f:51:41:
e3:33:4b:9f:b6:ea:b1:80:54:21:25:a8:81:d3:81:a7:91:ad:
95:18:8a:0b:f1:7c:82:30:a6:6b:45:85:78:cd:38:46:a3:a5:
1c:03:b6:85:d2:3b:cf:8b:36:13:e4:b5:ac:1e:81:17:08:fb:
e1:d2:34:75:e8:79:2c:a1:2d:8d:18:08:40:9e:8e:38:8b:de:
4a:4b:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:50:10 2025 by rpki-client