Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: TRMy25gIoqdjC/mjLXLCf9PhMf6Tv1j7OOg8nD0mvco=
Subject key identifier: 55:46:9A:6B:7B:AE:9B:5A:B0:5C:9B:A1:14:C4:95:A1:04:E1:D1:24
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 01976F9A00B696DD683BC2415D2CE82DE831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 18:00:53 +0000
Manifest this update: Sat 14 Jun 2025 18:00:53 +0000
Manifest next update: Sun 15 Jun 2025 18:00:53 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: diotstyJMwLWiy4HZs22FEHCz2vdczjw+v1DSi3opeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:00:b6:96:dd:68:3b:c2:41:5d:2c:e8:2d:e8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jun 14 18:00:53 2025 GMT
Not After : Jun 15 18:00:53 2025 GMT
Subject: CN=55469a6b7bae9b5ab05c9ba114c495a104e1d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:ff:75:5a:6f:c7:50:75:33:6b:9c:34:02:
b2:35:db:26:f7:2e:55:a7:2b:ed:05:67:31:77:1d:
27:cc:43:66:18:de:b7:dd:91:89:ea:68:b3:6e:fe:
ce:3d:cc:97:38:6d:cc:c0:e9:5c:64:a1:e8:e6:4f:
de:79:4c:e4:fd:c4:2f:17:35:1d:72:c8:0e:a7:33:
b5:4c:c8:df:6b:ae:56:f7:79:ca:c5:de:c6:61:26:
c9:75:e2:55:56:e4:4b:11:e4:ad:b3:63:53:74:22:
d6:13:d0:6d:54:8d:ca:88:75:4f:29:71:da:bf:bf:
7b:5a:e7:dd:6c:c0:82:6c:30:ec:56:85:70:e7:98:
97:56:d1:38:41:cb:3d:79:b1:c8:70:75:b9:0f:af:
76:af:dd:ce:3f:98:1e:bd:3b:8d:ba:f3:1f:34:5e:
50:0d:28:f2:f5:64:77:1b:74:dc:d8:65:14:00:89:
eb:8e:76:33:22:1c:11:44:44:b1:ec:c8:89:9a:d0:
81:d5:2a:23:24:2a:53:e2:96:44:de:53:34:b5:26:
ae:ff:12:5e:a3:a2:09:c8:bf:01:ac:e4:28:fe:91:
18:cd:d3:22:48:10:b2:39:33:b2:1a:a7:37:d3:9c:
8d:d3:6c:ad:b9:ab:29:68:38:59:7b:91:2a:36:e0:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:9A:6B:7B:AE:9B:5A:B0:5C:9B:A1:14:C4:95:A1:04:E1:D1:24
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7f:64:50:17:18:82:e7:4d:99:1a:42:43:e3:3b:2f:98:72:
b9:cb:13:04:f8:5a:3e:06:b8:41:4e:66:29:fc:18:8f:43:cb:
ca:3e:60:5c:79:e7:53:9a:73:ff:2a:8b:13:f8:3a:19:ab:e5:
15:2c:56:b1:41:70:62:0f:96:a7:92:55:ee:dd:f5:31:aa:81:
45:d7:a1:f4:ba:79:e7:4a:33:61:fc:58:d2:21:67:7c:b2:28:
ca:64:0e:0a:8d:3d:12:8c:75:90:76:0e:b4:8a:8c:ed:0f:3b:
63:c3:fc:18:a9:45:5e:a6:31:ef:b7:f2:0c:af:c3:3a:fa:e3:
ea:28:40:3a:db:5f:c2:d5:4c:1a:e5:17:44:70:c1:3d:07:ce:
91:0b:d5:5e:54:ce:9b:9e:3e:d6:43:2e:33:4c:20:48:54:6e:
5f:c7:e3:c4:e1:4d:f9:bd:d1:78:be:a5:69:e9:d0:7d:bd:b3:
97:ed:a4:0b:6a:30:a0:b8:2a:d9:c0:44:16:81:2c:9f:0a:b7:
da:a6:73:50:4a:05:63:89:8d:2a:97:97:2d:90:16:55:fe:dc:
05:da:44:8a:16:81:15:34:73:86:48:43:19:0d:86:f5:26:0f:
15:00:19:e8:7e:cd:87:74:5c:6c:ac:cd:97:25:c9:d7:d2:05:
e5:53:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:50 2025 by rpki-client