Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File: jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier: KAnfUQ/ddMnJV5y81PCEMXsN6H2EX4sb7dj3I7M8Vns=
Subject key identifier: 80:B8:6D:D2:11:8E:57:47:9D:C9:25:FD:1A:8D:15:D8:3B:25:CA:A7
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 019788481728DA69036189686573AFDD9987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number: 15A1
Signing time: Thu 19 Jun 2025 13:01:55 +0000
Manifest this update: Thu 19 Jun 2025 13:01:55 +0000
Manifest next update: Fri 20 Jun 2025 13:01:55 +0000
Files and hashes: 1: RJ12iqBIGMdg63G0MMvg2LDMix8.roa (hash: sESw+q0gARk5gtp41IohBHW+APoentCrsvNrV3WWi+U=)
2: aUmaQEWRoE1QO_xmwTCfYrd0iAI.roa (hash: KmZy81mfy9sZbmzpjyQc2GLJJhLJJJePfwOXkxp6EMc=)
3: h17YXZJyvSVJKfuRPJwacmnQTko.roa (hash: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=)
4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: LFH9s1hreAtGmXRfwKO5tOAmH9/4j8krAhpGS+PbXrw=)
5: vum5ModJUNyeXtPPKIV3l7J0g94.roa (hash: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:48:17:28:da:69:03:61:89:68:65:73:af:dd:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Jun 19 13:01:55 2025 GMT
Not After : Jun 20 13:01:55 2025 GMT
Subject: CN=80b86dd2118e57479dc925fd1a8d15d83b25caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:0b:28:d7:33:ce:d6:6d:6b:11:65:cb:75:
ea:bd:54:d9:78:90:6b:0c:e0:d2:30:47:77:af:93:
0a:83:18:c9:f8:08:69:ae:46:b9:2c:3c:f8:bc:56:
69:8d:93:75:d1:71:6b:28:50:ca:b9:5c:3e:67:25:
f9:a6:1c:68:cb:b8:22:ea:31:09:09:28:a4:b3:34:
b5:e0:6b:74:45:ef:f4:48:f9:93:d6:69:de:bd:ba:
16:a4:c0:c9:35:2b:f0:d0:45:eb:6a:b9:02:f9:89:
45:58:b5:6c:81:be:86:2a:89:48:ca:7e:bf:dc:09:
b6:6c:33:c9:e3:30:6a:7a:8e:cc:d6:40:1f:ce:a6:
ff:10:6c:30:ef:b9:d0:26:ae:31:4a:c8:3f:53:5b:
15:6e:d7:b2:59:51:0e:f0:17:a9:bb:54:00:dd:0e:
91:59:e0:56:bd:8c:5f:1c:31:40:ab:56:58:3f:5b:
08:cd:2c:c3:b8:12:ec:26:c6:6e:3f:07:28:23:67:
d1:f6:1c:5d:bc:58:48:2b:36:7a:b9:17:45:71:8e:
ee:15:66:05:75:a3:b6:5a:62:75:33:fa:08:6a:f8:
41:09:ff:93:02:f9:eb:cf:7c:46:47:08:29:03:55:
f2:c7:5b:a4:b9:db:df:b0:c7:48:e4:8a:0b:8e:ed:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:6D:D2:11:8E:57:47:9D:C9:25:FD:1A:8D:15:D8:3B:25:CA:A7
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:24:cf:c4:3e:dc:ba:58:fa:f0:76:01:e9:5d:29:11:20:e6:
11:90:1a:b0:f4:a2:b3:a3:d9:2a:b9:d8:64:af:66:bf:f9:33:
03:8a:bc:fa:5a:53:6d:8d:a5:71:7d:04:58:07:7c:b5:08:24:
12:0d:bb:3c:ec:01:88:89:2b:1b:d7:96:6d:82:13:c8:8f:92:
2e:aa:81:f0:c5:15:1e:76:39:ac:55:84:8d:ae:c1:42:26:54:
05:29:20:dc:41:82:bb:43:5f:9a:9e:42:72:6e:45:5b:aa:4d:
04:d6:cd:ba:76:b4:5a:06:c5:96:8f:f3:c8:3e:d9:03:e4:7e:
56:4d:63:55:77:48:73:92:8b:de:fb:1d:6d:27:62:62:0b:2a:
fa:f2:4a:12:4f:f9:78:38:0f:77:f7:24:63:26:ed:24:c8:22:
ec:5d:48:83:8b:37:60:37:bf:4c:44:ff:53:7b:ba:e9:58:6d:
fb:bb:d8:9f:af:b6:f4:30:cd:ad:ca:2d:a0:bd:a2:22:15:ef:
35:91:af:1d:8a:fd:a1:49:91:63:c7:6f:9b:f0:0a:84:97:e5:
92:fa:a2:bd:74:39:34:06:b3:91:14:46:53:c8:71:d0:d5:c4:
61:d2:3a:e5:26:74:50:7e:43:fb:e0:ee:32:a2:b2:51:1a:4a:
f4:c9:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:50:59 2025 by rpki-client