Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: EH+Z1dcqrP2OufU5JYO3NIFQ7G5hHXCY4S0KLm1LH7A=
Subject key identifier: 64:C3:6C:4F:4D:A5:C3:73:01:80:D0:7C:51:9B:65:D9:5B:32:30:70
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 01976C620A2E2627EB6C591E3C70DA09A8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 03:00:53 +0000
Manifest this update: Sat 14 Jun 2025 03:00:53 +0000
Manifest next update: Sun 15 Jun 2025 03:00:53 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: yqP7zS+gPYM49xOc78znblt7H3o6K/H3mtJoGCSL6BA=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:0a:2e:26:27:eb:6c:59:1e:3c:70:da:09:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jun 14 03:00:53 2025 GMT
Not After : Jun 15 03:00:53 2025 GMT
Subject: CN=64c36c4f4da5c3730180d07c519b65d95b323070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:97:00:2a:67:18:5f:17:ca:42:2c:47:70:
91:97:f2:49:88:d2:9a:53:96:dc:b0:ac:ea:b5:63:
3e:40:fb:4f:c3:2e:20:02:67:29:34:f3:af:a3:70:
02:5a:77:5c:53:5b:4b:4d:2d:a5:9e:66:c3:a5:c7:
e3:24:fa:ec:55:24:7e:95:62:fd:85:f2:b6:82:f2:
33:fc:7d:e9:ef:b0:fb:1f:00:e8:5d:8a:6c:d3:9e:
6b:3a:0a:11:ae:36:f4:1e:25:94:9b:5d:12:9e:c0:
fe:68:bd:9c:4d:17:e2:3e:04:5e:0d:9e:91:17:c3:
f2:0e:33:17:18:78:87:dd:6f:b5:18:89:52:1b:d6:
94:81:d2:2b:91:03:a2:a3:0b:04:b6:2c:7f:a5:ee:
b0:d8:01:4a:38:96:c3:35:de:1c:66:a1:35:51:d4:
ff:22:36:b6:a7:7e:5c:fa:0c:dd:4d:65:44:88:50:
10:6a:de:e9:39:ce:ef:1b:a4:73:7c:30:59:2b:e2:
8c:78:a9:ad:aa:ef:ae:00:36:a8:75:ba:95:65:d6:
87:f6:b1:eb:99:48:5b:e7:8f:3b:18:65:bb:00:7a:
78:ed:17:1d:89:32:53:cd:bf:52:ac:aa:0c:79:18:
09:8a:cf:2d:28:6d:63:fa:e0:de:09:fc:fa:72:29:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:6C:4F:4D:A5:C3:73:01:80:D0:7C:51:9B:65:D9:5B:32:30:70
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:a9:d7:78:5e:d8:85:d0:e0:88:20:78:23:f7:7c:c7:a4:
40:20:00:94:71:cf:7a:32:6b:53:2e:f6:39:8e:cc:c1:3f:25:
38:c2:67:d6:01:c4:76:51:da:46:1c:12:40:d0:40:1e:0a:1c:
b1:8d:63:9a:af:d2:a5:f2:4a:3c:90:00:15:d0:0d:c9:3a:28:
28:b5:b4:2d:0c:3e:a0:3c:9b:34:d0:52:5d:07:53:26:88:18:
90:31:85:0e:d2:62:95:fb:eb:87:56:3e:90:b7:fe:c0:7c:9f:
22:a9:46:e6:5b:4d:fa:15:a8:c3:c6:a3:8b:4f:15:ff:07:b9:
61:d9:01:53:25:1f:f2:16:d6:1f:9d:cc:6e:8e:6a:e0:57:c4:
2d:11:c5:00:2f:f9:a8:59:31:bb:ea:13:df:c8:ed:54:16:69:
49:3a:51:0c:78:6c:e7:65:44:97:04:ab:94:c1:32:d3:4c:f4:
62:cc:2b:b9:e4:f0:6c:2d:b5:ad:c6:aa:97:7d:ea:b0:dc:93:
1f:1b:b7:e8:f8:4e:5b:f9:18:f9:02:c6:62:e7:9c:b1:e6:3f:
d2:b9:95:53:c8:03:a3:10:a9:9d:e9:74:2c:b7:1d:a3:1a:42:
07:01:73:b2:d4:11:81:d7:de:30:11:e5:25:ec:9e:23:16:0d:
88:6a:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:33 2025 by rpki-client