Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: u5qjSaHCWn7pr5J9sT40Mu/UmN/xZ/JrgnMhn6CG65k=
Subject key identifier: 4B:D0:5A:AC:8E:1E:DA:2F:ED:FC:FE:31:EA:5F:F6:B2:B0:31:66:21
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01978BB592C251A29FCA645F65751C27041C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 114C
Signing time: Fri 20 Jun 2025 05:00:21 +0000
Manifest this update: Fri 20 Jun 2025 05:00:21 +0000
Manifest next update: Sat 21 Jun 2025 05:00:21 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: h6MLGos7lbrkQDsbrqiGMS25kUU7g1afDruKyIOcuLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:b5:92:c2:51:a2:9f:ca:64:5f:65:75:1c:27:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jun 20 05:00:21 2025 GMT
Not After : Jun 21 05:00:21 2025 GMT
Subject: CN=4bd05aac8e1eda2fedfcfe31ea5ff6b2b0316621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:e9:b8:9b:de:b2:1f:70:99:ad:df:03:f9:
cc:6e:ac:8b:d7:8a:23:68:d2:62:72:5e:fa:4e:4a:
45:7c:41:51:ab:ba:73:59:19:27:11:9b:38:b2:60:
04:ab:bb:85:0c:83:85:89:15:61:2f:28:57:fb:b6:
6b:92:c2:a4:da:39:e7:e4:18:2d:a3:3e:91:63:30:
59:db:80:26:43:50:a9:0f:1a:67:71:d4:cf:65:0e:
e7:ec:78:b3:b1:69:73:3b:f1:6f:78:0c:11:be:df:
cb:be:fe:d0:4b:b1:ef:69:25:09:9d:36:74:fe:51:
ec:92:ed:5d:9f:1d:d9:77:05:37:92:97:a8:a9:c4:
52:6a:a4:23:40:af:0f:17:ee:6d:a2:10:6d:8a:f9:
d2:a5:4d:aa:77:63:e4:5e:78:67:a5:15:dc:26:08:
a7:1f:79:02:84:34:d2:0e:36:24:8e:7f:ff:28:21:
de:87:dc:b9:fa:8a:63:0a:cf:27:40:44:57:3a:96:
6e:7e:17:83:a1:fb:76:ae:5d:f7:66:5e:9e:0c:c9:
10:fd:a2:c1:e9:16:68:d8:72:dd:92:9b:f7:f2:fb:
c1:0c:de:40:b1:73:2f:a3:78:62:60:1c:84:81:3d:
0a:34:a4:c6:b7:b1:7b:11:56:35:2b:f4:52:ff:19:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:5A:AC:8E:1E:DA:2F:ED:FC:FE:31:EA:5F:F6:B2:B0:31:66:21
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:c2:6e:9d:58:07:b7:76:00:56:26:b6:d5:d0:fa:40:8e:
77:1a:7a:c4:d9:88:48:91:28:9f:32:b2:8d:ec:4f:1d:01:68:
94:7d:1a:26:dc:d6:9f:53:f7:8c:6f:97:d1:33:da:8e:fc:fc:
d6:8c:27:80:9d:d1:61:4c:60:5a:55:ba:59:f1:8d:27:87:d5:
8b:bf:31:39:fa:7a:92:25:88:40:2c:c2:dd:80:17:20:b8:9b:
e5:bf:89:6c:e4:c4:29:9a:07:68:03:49:66:bc:ea:96:a8:8e:
1f:c9:71:26:32:73:0a:d2:87:96:42:a6:12:46:40:21:2a:07:
27:6b:b7:88:75:48:ef:84:7a:53:33:b5:0f:61:67:d5:9f:d3:
9f:53:4d:2e:da:ff:eb:56:a0:cb:7d:d8:0b:9b:6e:67:da:c3:
62:7d:4a:66:5d:84:54:29:39:de:67:5c:a6:c2:6e:08:56:10:
38:40:26:27:e4:dc:16:ef:df:cd:c9:fc:2f:05:be:24:c1:a7:
b0:4a:ea:fe:36:0e:a4:88:c2:1e:1a:be:1d:06:00:c8:76:60:
f4:44:5e:36:e4:76:f0:cd:b1:18:bd:0b:33:d0:0d:0a:1a:a4:
7c:7d:a7:f5:f5:33:b1:e5:ee:d4:27:d0:46:4d:b3:14:fc:d0:
ae:40:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:19:08 2025 by rpki-client