Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: nA1cJrHb7wJjV84zVvZ/FPg75CEK9nSGzOxaBavBnPg=
Subject key identifier: 9A:44:7A:6B:27:EC:5C:9C:3E:06:BF:98:04:81:6A:A3:DF:05:4B:8E
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 019770E3A8DD2228ADF88B6CA7EECFC117A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0E13
Signing time: Sun 15 Jun 2025 00:00:57 +0000
Manifest this update: Sun 15 Jun 2025 00:00:57 +0000
Manifest next update: Mon 16 Jun 2025 00:00:57 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: UgScb/4YbftMFwY1RQ7jE+/hmkGeKQSceZ+IG8QZuQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:a8:dd:22:28:ad:f8:8b:6c:a7:ee:cf:c1:17:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Jun 15 00:00:57 2025 GMT
Not After : Jun 16 00:00:57 2025 GMT
Subject: CN=9a447a6b27ec5c9c3e06bf9804816aa3df054b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:ec:a9:e7:5c:85:e8:2d:44:6b:cc:e8:6b:
72:00:d6:e0:cc:40:f3:f6:10:25:9b:5e:99:f9:43:
63:40:7f:92:a4:97:07:1f:cf:2e:9e:2e:db:b9:a1:
d5:25:00:b8:63:c8:98:e3:b8:b1:6d:fa:5f:7f:a1:
b6:20:45:ea:fc:47:04:09:ce:78:a2:87:9c:60:6d:
50:e8:5a:d9:6b:1c:41:62:e4:27:10:ae:95:37:74:
94:3f:14:49:35:21:dd:62:78:e0:6e:15:c5:1c:4c:
3b:b2:0b:a8:75:89:77:9f:aa:4d:0e:e1:be:56:e8:
81:7d:b2:a7:4c:64:d1:0d:78:71:96:d9:5e:03:fb:
42:8b:92:d8:8f:c2:cc:09:6a:3d:3b:ed:95:db:d7:
6a:f5:5d:6d:c1:f7:01:1c:b2:f2:f5:aa:bf:0a:b9:
a9:0c:7c:a0:18:40:06:a8:ab:30:e6:63:72:0b:59:
6d:2a:2f:b5:5a:09:98:b8:c9:3a:a3:24:6e:52:1f:
be:e2:f4:b3:b2:3d:0e:17:9a:ca:b4:f7:c6:d8:90:
82:04:a6:fb:58:28:ce:27:c7:af:54:db:ec:67:8a:
91:d4:0a:45:0e:6b:d3:0e:1b:60:88:df:e5:7b:7b:
fe:40:d7:d7:0a:46:17:3e:90:ea:d7:7d:b6:bb:f7:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:7A:6B:27:EC:5C:9C:3E:06:BF:98:04:81:6A:A3:DF:05:4B:8E
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:0d:0c:ee:f3:f0:27:fe:c8:32:d2:e6:61:e2:91:75:28:
aa:aa:f9:b8:6d:56:11:a4:0f:b7:0a:fd:57:64:40:7a:90:f7:
df:5e:80:10:7f:6f:2b:db:5b:2b:75:8e:bb:f0:8a:d0:7a:71:
b4:67:04:d3:22:b7:86:bb:83:0b:6b:b5:4b:bd:a8:7c:19:e2:
fa:3a:2a:36:de:3d:5d:c7:d2:4a:a5:53:16:91:8e:d3:33:17:
cc:38:c3:98:7a:3d:70:bc:1d:c1:69:c1:8e:bf:7e:5a:c6:22:
21:50:f4:5a:85:d5:99:87:b4:33:c8:b2:b2:21:0a:c8:44:99:
6d:70:66:5a:1e:15:0f:38:8e:70:f4:db:53:d6:0b:cb:82:ac:
77:58:b9:e3:03:6e:cb:f4:47:a7:ff:c8:f5:1c:6a:56:2e:2a:
f1:40:7a:1a:dd:f1:76:08:de:70:ef:60:27:37:f3:50:44:22:
10:60:ba:04:89:38:5e:b4:7b:e0:32:6c:9c:dc:97:96:88:da:
7a:a6:2b:2f:e7:5b:d9:fa:51:96:5b:e4:28:00:c4:b7:12:65:
f5:e5:a1:c3:eb:2d:cf:92:a5:bb:07:4a:0b:4e:2c:e1:b7:96:
d3:27:cb:0c:85:13:95:06:cb:0f:c3:b5:59:b4:f3:b0:13:f1:
7e:08:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:41 2025 by rpki-client