Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: PM8NHclF/ZEF1AUDFposy6o0EMdSEX9+jDYoaSwFjoA=
Subject key identifier: 68:01:E3:1F:2D:8A:DB:FB:98:F3:12:E1:68:70:B5:04:0F:F0:48:5F
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01976E508745BD9294F96A879B8230B524D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0EC8
Signing time: Sat 14 Jun 2025 12:01:00 +0000
Manifest this update: Sat 14 Jun 2025 12:01:00 +0000
Manifest next update: Sun 15 Jun 2025 12:01:00 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: +dqLLrZSghwJPx7toUo3KPyrtdBNUVx4l+AEfkaSGMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:87:45:bd:92:94:f9:6a:87:9b:82:30:b5:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jun 14 12:01:00 2025 GMT
Not After : Jun 15 12:01:00 2025 GMT
Subject: CN=6801e31f2d8adbfb98f312e16870b5040ff0485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:a0:9d:fd:40:7c:e9:d7:60:96:51:6a:9c:
2a:86:08:7d:ec:6b:2d:56:04:56:79:05:34:47:06:
ce:4e:d7:00:c6:39:58:01:55:74:47:e1:94:9f:1a:
34:e8:d7:93:f2:c3:e2:29:c1:7a:5d:87:75:b0:14:
86:78:ae:39:19:6b:e7:80:54:5a:c0:de:1e:15:6c:
a2:84:9b:58:1e:cf:4d:64:b5:67:1c:2f:a0:72:9f:
6c:11:45:44:d4:47:99:22:6d:6e:54:2a:d4:bc:36:
5e:cd:5f:cd:c6:8d:e0:e7:99:26:fa:fb:e0:49:94:
43:2f:61:2a:b1:96:88:7a:f5:4b:95:a8:35:ce:7e:
7c:db:31:7c:45:f9:81:59:37:3a:97:ae:23:94:aa:
7c:0e:06:bb:57:3d:46:2f:ff:39:3b:9f:9b:1b:bc:
6a:ea:94:8f:7a:c6:27:b1:72:36:4d:d8:f5:34:3c:
30:32:ad:8d:36:11:8a:28:41:c2:4a:c9:9b:89:ad:
45:4b:90:34:bb:2c:63:38:ee:36:ce:1f:fa:08:00:
f4:ff:b8:33:0e:e2:c3:1b:6a:e8:84:e3:e3:8c:37:
1f:c7:e7:db:83:2d:03:3e:f4:b1:e3:a7:f5:c3:73:
2c:2b:3f:b5:b4:1b:e9:30:80:27:1e:5f:43:f9:4c:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:E3:1F:2D:8A:DB:FB:98:F3:12:E1:68:70:B5:04:0F:F0:48:5F
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:fc:d0:a1:7b:4a:17:71:ca:6a:0b:ad:0d:f2:0a:e0:53:
b6:a7:92:e6:f4:dc:57:f2:82:e5:22:bb:f8:09:fd:96:42:23:
ec:3e:28:d7:f9:a5:40:79:02:e6:69:e2:ff:3d:0d:ff:04:bf:
89:e7:c4:87:84:d4:b7:f0:b0:aa:76:e6:2c:ca:b4:74:56:19:
32:17:18:36:8b:50:27:a1:aa:93:8f:97:02:94:5f:90:00:eb:
8c:19:f4:f5:30:b4:20:1a:5d:d6:63:e1:40:90:52:f6:25:88:
75:a3:c8:66:6e:66:e8:2a:df:21:da:ef:6f:d1:d2:30:f3:92:
3d:ef:76:55:82:2a:89:8e:23:6a:77:be:17:ec:6f:3a:c5:e9:
27:db:24:cb:84:77:3b:31:1a:01:9b:cd:29:f6:b2:e6:5a:c0:
d1:be:9f:3d:da:30:78:07:c3:24:08:e7:d2:3c:9d:fc:63:89:
c4:ad:44:19:8e:19:48:7f:40:69:83:30:e0:80:c7:fe:a6:8f:
bb:e8:a5:c6:3e:44:16:73:1f:31:d2:15:4a:4d:68:bb:99:c9:
90:9b:41:a0:98:98:cb:8a:d7:f6:0d:b5:d6:6e:f9:d8:07:29:
97:9a:8b:3e:07:f8:43:62:5b:3b:6c:70:6c:f1:18:aa:5a:d0:
2a:2d:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:17:58 2025 by rpki-client