Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: Daw4QiFFcQ1EcCOL/O+Jbcj6Glwa6V3+AdV2WLgDb1A=
Subject key identifier: CE:6B:6F:34:D7:C8:94:23:F4:83:84:D9:DC:4F:A3:BA:D9:08:5D:A1
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01977F44289128D1354D80BF3723389DC3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 15A1
Signing time: Tue 17 Jun 2025 19:01:02 +0000
Manifest this update: Tue 17 Jun 2025 19:01:02 +0000
Manifest next update: Wed 18 Jun 2025 19:01:02 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: AahXrZXUCuXnPOYXNhh5QUwF4c8JRxN5TMVzPxK+xKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:44:28:91:28:d1:35:4d:80:bf:37:23:38:9d:c3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jun 17 19:01:02 2025 GMT
Not After : Jun 18 19:01:02 2025 GMT
Subject: CN=ce6b6f34d7c89423f48384d9dc4fa3bad9085da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:9c:ce:b8:bc:1e:53:11:55:ac:09:52:54:
11:da:94:8f:b4:40:57:d4:7e:7f:cd:9b:9f:5c:1d:
22:47:45:e2:60:83:ed:14:f8:50:ca:dd:8b:67:ff:
eb:09:26:a5:77:1d:de:46:b7:17:eb:12:c3:6e:99:
ff:b0:3b:be:c4:e2:b3:a0:99:b0:e0:48:36:a3:49:
7c:35:38:c7:0e:4b:bf:83:7b:31:b0:a0:a3:c1:d5:
f3:91:9d:5a:91:5e:31:3b:9a:75:5b:05:34:c7:b9:
80:db:f0:68:bf:ca:ff:be:1a:a2:3e:af:be:5b:df:
45:72:fa:f2:91:df:4d:3c:04:19:6b:86:58:2c:4f:
07:60:41:7f:b0:42:87:e7:70:4e:1e:d1:df:39:f8:
95:e4:4f:f8:4a:73:98:9a:b9:aa:dd:05:dd:b8:c4:
16:42:2f:32:e4:2e:df:34:30:ce:5b:b5:e0:a8:f6:
5c:7f:b1:e5:99:83:ce:8a:bf:5a:f1:06:06:61:ff:
48:00:61:64:f6:af:8d:00:03:e7:dc:31:9a:7e:d0:
62:8c:28:af:14:5f:e0:30:ea:b8:43:6b:3a:f9:03:
b1:32:ca:2e:f4:1e:6d:ec:59:e0:59:d9:29:96:34:
89:5d:70:d7:28:c9:dd:92:eb:5e:1c:3c:5f:df:9b:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6B:6F:34:D7:C8:94:23:F4:83:84:D9:DC:4F:A3:BA:D9:08:5D:A1
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e1:7d:27:b9:9d:3b:df:16:29:4b:96:cb:98:9e:5c:ae:63:
00:7a:44:82:a2:0c:7d:dd:39:27:a4:0b:73:8a:0d:05:f8:5a:
cb:7c:ab:cc:9c:43:19:1c:d7:cf:5b:a8:01:b0:b9:58:1d:c8:
99:2a:68:13:39:93:80:cc:7e:15:77:c5:d4:9a:4a:a4:53:4b:
99:0c:00:a2:4e:6d:7e:aa:cf:e2:f7:83:17:87:4f:78:50:e0:
5c:85:41:bb:16:d5:9e:23:81:b1:66:5b:cd:58:c6:e5:f8:a3:
a4:ec:08:69:1a:f7:50:12:02:b6:85:f0:2f:ee:8c:fd:f4:c8:
18:a0:35:ef:cc:a8:4a:ed:68:2c:6a:45:d8:ec:37:d1:44:9d:
68:51:ef:28:e1:0e:21:bf:e1:67:aa:82:3f:ce:da:04:e8:5c:
26:2e:95:c2:5e:18:dc:f9:84:85:b8:80:fc:62:2b:33:60:1c:
6f:ac:92:d6:94:51:15:7a:cb:b2:64:c4:5c:10:a9:c2:6b:8a:
c7:e7:52:ac:5b:0b:eb:73:de:e6:47:21:51:9d:4a:fc:3f:ac:
ee:fa:0f:68:1f:79:d1:ad:ba:0a:12:01:1a:c7:57:b2:01:88:
c2:4d:c7:19:9b:1a:72:55:2e:73:5a:01:91:d0:71:da:cd:80:
d2:34:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:28:00 2025 by rpki-client