Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: SvqS6ExZpSPgVwhnhBS5LO9GMrfdJUde9ZgcLMOdxb4=
Subject key identifier: 73:9A:18:23:64:0B:1B:19:F7:D3:BC:23:CE:4E:11:FC:03:34:1E:E3
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 01976DE2F507EF16EC8E769FA92802C527C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 1132
Signing time: Sat 14 Jun 2025 10:01:19 +0000
Manifest this update: Sat 14 Jun 2025 10:01:19 +0000
Manifest next update: Sun 15 Jun 2025 10:01:19 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: qJ4uNF6Hnht75elJ6+ms7CP299g7UPZGpjbJeQ7vtKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:f5:07:ef:16:ec:8e:76:9f:a9:28:02:c5:27:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Jun 14 10:01:19 2025 GMT
Not After : Jun 15 10:01:19 2025 GMT
Subject: CN=739a1823640b1b19f7d3bc23ce4e11fc03341ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:e2:dd:aa:1f:07:cc:a0:88:d8:11:b7:d6:
ed:be:fc:52:04:d6:8e:8e:b0:de:e6:80:1e:09:c5:
0e:23:0a:9f:f2:fa:41:c5:f5:46:e4:a8:46:f6:fd:
15:18:ca:48:7b:fd:29:1a:1c:8f:fa:72:de:6d:71:
93:b8:07:4b:9a:01:53:03:87:b8:70:80:e2:c7:a0:
e2:c2:2d:c1:43:78:1c:c1:13:13:eb:d6:a8:08:98:
73:1d:5c:11:49:84:b1:2a:15:5e:5d:83:a7:b2:6a:
d8:1e:97:ca:58:3e:a9:5d:12:ba:b9:46:9c:ea:68:
2f:f6:da:db:aa:8f:31:f1:b9:74:c8:9b:fa:c3:b5:
3b:fd:54:50:83:0f:28:72:34:77:ca:fd:c7:c3:0c:
7a:36:b6:3d:b4:a9:f0:bc:3d:4b:91:2f:47:e9:ce:
bd:a4:46:f0:a1:ac:fe:6b:8d:c7:d1:9f:4c:c6:b3:
fe:b2:40:53:bc:ea:52:99:7b:d3:76:e3:48:7a:2a:
0d:e1:f6:3e:1c:c1:d5:a8:be:17:78:7f:50:8e:6a:
fd:50:c3:ef:40:ed:41:74:8f:0f:fb:25:de:90:6b:
40:70:05:68:a5:63:be:0a:e5:97:16:72:21:30:4a:
bf:7f:07:ef:a6:a8:a5:2c:bc:33:24:32:f2:1b:a1:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:18:23:64:0B:1B:19:F7:D3:BC:23:CE:4E:11:FC:03:34:1E:E3
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2f:7e:76:a7:4d:d7:c5:99:3e:18:88:54:b9:f1:df:0e:02:
77:c4:fa:4e:86:20:c5:31:ee:4e:06:07:08:20:93:b9:65:b8:
77:a0:b3:73:14:12:15:b4:ed:22:d5:c0:aa:3c:47:54:01:f0:
b0:39:62:0e:6e:fa:34:6c:2b:25:f9:4a:54:cd:ed:38:0b:ea:
39:4c:cc:a1:bd:0e:20:c3:15:23:5c:5f:84:7b:68:4b:93:fa:
69:22:9c:42:23:0c:4f:4e:95:a4:f5:21:e1:45:8f:75:43:d7:
42:57:1a:0a:06:c3:19:32:33:26:0e:dc:06:60:87:62:ae:a8:
db:8b:c2:dc:bf:5d:b2:11:29:ed:3c:be:05:ec:68:6b:3c:48:
5f:4e:d5:f8:80:28:d8:3f:5c:2d:6f:98:09:46:57:0e:a5:ff:
a8:f3:15:e0:1c:26:cd:15:b4:e9:80:f2:9c:c1:4b:8f:60:6c:
80:20:19:26:09:61:5c:b1:56:1d:d9:72:1a:87:2b:b0:6d:48:
45:7d:89:51:fb:68:19:94:53:ad:e3:e1:d1:99:6d:47:45:62:
6d:e2:c3:a4:19:fb:10:56:e8:a0:51:fa:4f:4e:c3:e0:c0:41:
0d:8b:da:85:82:e2:c2:fd:29:0c:57:bf:8c:de:3a:50:6e:69:
5b:12:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:47 2025 by rpki-client