Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: IslAtI7nwBlwkkyxdl4WKqviQcEW8RZK61A6zcG+R7s=
Subject key identifier: 22:C4:DE:3B:25:06:A2:82:56:40:BE:FB:02:DE:B0:AB:F2:88:29:9D
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019771F629D727853F9D989E1FF0A6A71475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:00:47 +0000
Manifest this update: Sun 15 Jun 2025 05:00:47 +0000
Manifest next update: Mon 16 Jun 2025 05:00:47 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: gJHMSfcZnT2B8gk1+kFC4XYdIkP82OxkOqwEGuVLe/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:29:d7:27:85:3f:9d:98:9e:1f:f0:a6:a7:14:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Jun 15 05:00:47 2025 GMT
Not After : Jun 16 05:00:47 2025 GMT
Subject: CN=22c4de3b2506a2825640befb02deb0abf288299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:77:8e:e3:74:02:17:a0:ec:d8:8e:76:b9:
f1:92:43:81:cf:f6:f9:10:47:8b:66:59:40:65:06:
6d:c9:05:23:52:cd:56:ae:92:fc:7d:da:29:9a:ad:
97:23:8a:d9:10:4a:59:ac:c5:ab:96:7c:ae:c2:e0:
1f:8f:ff:e8:a7:fa:fb:3c:01:8b:8c:97:14:42:5e:
9b:5a:b1:ec:a8:00:0e:f7:f3:87:29:c2:27:86:e1:
8d:b0:61:3b:06:b7:47:18:06:c3:22:85:37:86:98:
ff:72:27:9f:3d:72:69:e5:0c:4c:06:a1:d2:ad:33:
38:a0:f0:f4:4b:fc:ba:d9:8f:07:04:8f:af:2c:71:
cf:91:1d:c4:9c:b5:fa:2a:d1:0a:74:48:37:cf:74:
02:b5:d1:6e:7e:c8:8d:a0:7c:4a:68:19:fd:99:2b:
e9:0f:c7:ae:4f:9a:54:8e:1c:29:49:92:2e:08:5a:
6c:8b:33:17:28:d6:57:72:78:ea:92:9b:a9:42:8d:
18:5b:cd:0f:88:dc:05:fd:51:fc:64:88:bb:ff:79:
c4:a8:1d:87:86:35:b9:06:83:68:48:22:22:9c:3e:
f9:4e:84:a6:7f:1d:39:2d:27:51:70:ac:63:7e:b2:
95:b4:31:87:81:b7:8b:6b:03:3d:8a:18:16:b4:e3:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C4:DE:3B:25:06:A2:82:56:40:BE:FB:02:DE:B0:AB:F2:88:29:9D
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ed:dd:28:ff:94:5f:e1:39:72:c7:ec:f1:54:ce:19:1a:c5:
6c:7f:1e:32:9a:81:cc:95:5f:5e:a0:6e:07:7b:ac:d8:10:ca:
3c:8e:66:53:dc:eb:53:3a:88:23:c5:a2:94:1c:19:f6:4d:c8:
6e:99:ad:d5:2a:8b:18:9b:29:18:58:db:ab:3e:a1:84:b9:17:
30:c0:23:49:8f:23:1b:bc:3c:88:c1:ef:16:10:01:7c:bc:97:
9a:88:c8:73:90:b5:2b:33:ce:fe:c1:f2:6a:7d:63:47:36:3f:
7f:8a:9c:98:a4:89:20:73:5f:6b:e9:b8:74:28:3d:de:6e:41:
db:8e:f7:3a:39:38:c9:b5:0e:8e:94:48:30:b1:8f:0a:52:fd:
9b:3a:ee:cf:90:46:90:6d:57:a0:f9:59:ac:40:ef:71:d2:b8:
f1:e1:10:91:ea:bb:a1:42:5d:08:89:64:47:8d:be:5b:23:78:
c9:12:bb:0c:01:ae:45:aa:4b:99:d1:8b:d0:63:f3:8b:96:f3:
ea:d8:fd:51:5f:06:9a:b7:e4:27:a8:aa:99:0d:75:f0:d0:c2:
a0:2a:87:22:b6:41:9b:fe:b0:25:12:8e:c4:bb:05:24:28:40:
b7:d0:9c:8a:9b:35:9a:c7:ce:91:48:a8:8e:d1:dc:3f:bd:3c:
de:45:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:15:54 2025 by rpki-client