Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: gS87bFSbIzqfVagMCJJxs55mNsuE+7oW397PTLNd6YY=
Subject key identifier: 56:B3:E1:6A:90:3F:09:D0:3E:D9:F2:51:28:AF:28:CC:1F:B2:55:25
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 0197711A38F6FF9D63774EFED36BE1BE842B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 1524
Signing time: Sun 15 Jun 2025 01:00:33 +0000
Manifest this update: Sun 15 Jun 2025 01:00:33 +0000
Manifest next update: Mon 16 Jun 2025 01:00:33 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: ngw797gPfE8AjOgZ89q7TjmQHhgEeTgC9Fx+Xcx9DB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:38:f6:ff:9d:63:77:4e:fe:d3:6b:e1:be:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Jun 15 01:00:33 2025 GMT
Not After : Jun 16 01:00:33 2025 GMT
Subject: CN=56b3e16a903f09d03ed9f25128af28cc1fb25525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:ea:4e:0d:1f:cd:ae:7e:10:f2:24:33:ce:
ea:65:cf:cc:86:0d:9f:f1:1d:6d:3b:9d:92:74:10:
1e:6e:d8:d3:2d:6b:29:2c:87:6b:0a:ee:0a:44:f4:
6c:c7:48:23:4a:01:f4:dc:78:7f:18:68:8f:90:f9:
b4:de:75:6d:25:77:19:6e:0c:22:53:c6:82:b0:70:
5d:20:c0:df:a9:a8:fa:1d:f5:18:f4:d7:07:ba:fe:
14:6b:d7:ba:8f:95:94:31:ba:b1:62:13:92:cc:1f:
f2:8f:66:4f:02:a4:57:cd:c5:e2:f4:1d:c7:ab:8c:
18:5f:fe:d7:ea:7e:21:c4:ad:fc:9f:ba:98:4b:69:
e5:8c:c3:d4:24:1f:4a:fb:b1:51:2a:d6:a8:c3:83:
1b:34:0f:94:69:84:81:d7:72:66:44:cf:77:cf:f7:
e7:92:52:4a:6e:14:61:20:1a:d2:5c:3a:92:89:d6:
70:31:e3:1a:41:e3:d5:15:8d:fd:e9:cd:b8:db:b3:
d0:eb:d3:6a:fc:09:b2:62:61:e1:c8:81:7e:04:e3:
01:59:e4:83:68:fe:85:5b:41:bd:35:82:f6:f4:3e:
51:1c:b5:16:49:7f:bc:1e:34:5f:c0:0c:1c:7f:6e:
6f:7a:28:2d:67:28:10:ba:03:39:12:1f:b3:5c:c0:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B3:E1:6A:90:3F:09:D0:3E:D9:F2:51:28:AF:28:CC:1F:B2:55:25
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4f:ec:71:de:5d:ae:d1:1a:aa:42:a9:0a:6a:c1:87:b6:c9:
fe:39:42:82:a8:44:3c:6c:98:30:4c:b9:7e:67:f7:de:27:3c:
67:5e:f7:9e:b5:3d:1e:c5:31:a8:5d:68:cc:6a:f6:12:6a:35:
43:0f:57:ea:f7:5c:fb:82:61:9e:6c:34:61:22:d8:19:f4:7c:
cc:d1:7c:fb:c2:49:40:05:36:a0:86:1a:f2:41:e9:dd:3b:a0:
03:18:c7:ce:25:d5:97:c4:76:1b:15:e0:dd:97:41:4e:13:de:
84:d6:08:c1:1c:81:3b:77:ec:a1:74:c2:07:5d:af:58:e7:1f:
c2:3c:8c:10:a5:01:d6:88:bb:2e:6e:2f:e5:be:cc:8e:81:7b:
88:10:5d:87:2c:82:92:51:47:fd:74:02:67:1b:b3:eb:4e:ad:
c5:da:72:5f:44:bd:5e:40:cf:3e:2f:e5:1f:3d:7a:85:fc:ae:
5f:5f:5c:04:29:f7:5e:48:24:70:41:f0:33:76:13:d1:67:02:
b0:1a:01:29:14:e5:ab:06:e9:f0:54:3c:1b:5e:0b:23:56:c1:
61:c2:69:8d:6f:63:97:92:f2:c2:ca:c5:c6:3f:3c:20:1a:7e:
1d:83:35:02:02:30:62:72:93:49:4c:8f:99:df:90:14:9d:77:
3c:4b:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:14 2025 by rpki-client