Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: G82yaG9xXKgR7q/FCxPGvzHqTehTWE0cqEMHaw2wlaQ=
Subject key identifier: 03:B5:D4:25:D8:DB:65:8E:6C:AA:79:AA:23:F8:D1:BC:83:E7:D7:00
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01976BBD720AB5E3C84A5D87AC77B9ADF881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:01:06 +0000
Manifest this update: Sat 14 Jun 2025 00:01:06 +0000
Manifest next update: Sun 15 Jun 2025 00:01:06 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: A+7kc0IinHGVsSX6k5EARXK4OxZpJpato+vBIhCJrh8=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:72:0a:b5:e3:c8:4a:5d:87:ac:77:b9:ad:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Jun 14 00:01:06 2025 GMT
Not After : Jun 15 00:01:06 2025 GMT
Subject: CN=03b5d425d8db658e6caa79aa23f8d1bc83e7d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:db:ea:6e:ca:92:8c:c2:ee:87:d0:d4:66:
35:94:31:b8:f9:08:3b:58:fd:9a:38:56:ce:32:d2:
b6:f4:99:2e:56:46:2b:ae:26:ed:d1:42:46:de:5c:
66:d1:16:dd:cd:93:ae:62:c3:fb:36:2b:b5:d4:4a:
67:c8:83:56:eb:5e:4d:f9:5a:77:c0:37:99:9a:60:
17:31:ec:68:1b:2f:a1:75:54:90:f9:21:18:73:1a:
2a:fa:c3:56:09:d5:61:a1:fd:c3:df:93:39:0c:3a:
94:be:22:48:eb:f9:1f:01:41:9a:d3:c0:86:8c:de:
93:17:47:ca:54:89:42:7c:57:69:60:49:9d:01:4a:
2f:f7:1a:29:5c:29:0d:d7:3d:d1:72:4d:80:11:f7:
59:7f:d0:ad:62:65:a7:fc:cf:9b:e7:34:f5:3f:5a:
7f:b9:50:7a:72:f0:e6:9d:77:b6:dd:58:dc:5f:a5:
2c:bb:94:af:63:c4:65:8f:ff:af:6e:99:d0:c2:8f:
60:d4:fb:4e:a7:6d:8a:26:a3:7a:df:cf:5c:14:95:
ca:22:f8:e8:30:02:2a:ab:f3:31:f2:d8:42:33:64:
da:45:24:c0:56:03:f6:0e:92:cd:8a:d0:9f:3b:c0:
79:f3:c9:84:aa:67:fc:82:9a:50:6c:bd:13:cb:7d:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B5:D4:25:D8:DB:65:8E:6C:AA:79:AA:23:F8:D1:BC:83:E7:D7:00
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f1:8b:83:f8:38:1c:26:7b:64:d1:dd:df:ed:6b:1f:6d:dc:
c0:d6:39:ff:f0:11:3a:26:4c:9c:f0:4d:be:cd:0d:50:ce:f2:
ed:a7:70:b2:dc:93:a0:77:90:b7:db:53:ed:94:d5:7f:5e:bc:
44:58:04:e9:a5:25:ba:4f:25:3e:e9:cf:5f:40:41:cd:09:72:
80:71:46:9c:e4:67:02:1f:31:bd:37:27:48:0b:05:57:53:cb:
f5:72:cc:c1:77:55:cc:08:44:2b:09:51:71:bb:41:91:c7:02:
43:aa:f9:89:78:35:d2:54:e9:f6:7e:89:a5:c5:5a:80:3b:80:
30:68:5a:e1:8f:1b:fc:be:60:c4:46:35:6f:18:b8:cf:ff:14:
be:28:f1:07:80:15:bc:1a:3a:58:0b:ff:2a:ac:21:85:1b:f9:
dc:3e:9f:4d:0c:6a:7e:b5:e8:a7:e2:c1:c5:08:cb:cb:59:58:
6f:1b:e5:47:ec:29:1d:0e:0a:f8:5f:05:a5:65:04:07:dd:5a:
28:78:d2:b6:a4:ad:1b:c7:3b:00:71:51:3e:4b:f4:48:e7:99:
99:13:c0:4a:8a:5d:a8:1d:d3:5d:0d:a8:b6:0e:c0:b6:f5:15:
64:e6:12:c9:55:85:6b:8d:6e:95:87:c5:bf:ec:69:45:e2:26:
fe:19:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:18 2025 by rpki-client