Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: 0rkwAfiaM1V9qPbaIkpz24qK2R4lcAx7TjTE0sDPk5o=
Subject key identifier: BF:CF:1A:C8:8E:F6:A7:44:E5:FD:89:40:A8:2F:37:2B:01:AE:27:FB
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019784D7BAAC970E6F3CD214DCE5EFE45448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 159D
Signing time: Wed 18 Jun 2025 21:00:19 +0000
Manifest this update: Wed 18 Jun 2025 21:00:19 +0000
Manifest next update: Thu 19 Jun 2025 21:00:19 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: 7x3sZUERiHix191PsgkFONku7vlTDY/zzoBRF2EV7qI=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d7:ba:ac:97:0e:6f:3c:d2:14:dc:e5:ef:e4:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Jun 18 21:00:19 2025 GMT
Not After : Jun 19 21:00:19 2025 GMT
Subject: CN=bfcf1ac88ef6a744e5fd8940a82f372b01ae27fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:24:36:09:e0:ae:cd:5d:bd:ae:de:16:0d:
7d:a5:df:e9:cb:68:16:87:46:53:5b:bd:e1:24:a1:
57:70:03:e8:6d:ee:02:7f:58:8c:8a:de:8e:43:5b:
40:b0:cf:fc:c5:91:75:dc:97:79:33:3d:ec:7f:ca:
f7:51:fe:69:6b:16:f7:2e:06:fd:7c:80:19:b1:5b:
81:60:16:cd:56:0b:1f:32:bc:c0:fa:04:85:90:f8:
0c:9b:94:77:c3:7b:29:fe:69:00:b2:66:84:9b:5d:
61:17:3c:4b:4d:14:3a:3b:d0:10:cc:f5:c9:e7:18:
cd:37:16:1d:49:5f:e5:e3:e4:cc:00:41:24:21:c5:
67:4f:b6:88:0b:db:b5:9b:49:3a:44:c7:a0:17:d2:
80:4c:0e:cf:80:99:5f:67:cb:c4:1c:d5:75:f3:ef:
df:2d:71:e2:f9:60:80:9e:0c:23:34:31:5c:57:fc:
7b:7e:82:6d:b8:df:d3:d6:bb:a7:15:52:6f:c5:d0:
fb:d8:3e:bd:14:61:66:80:fa:e6:55:4c:f8:1e:d6:
59:e1:a9:e3:dc:52:e2:16:82:be:af:a1:00:09:41:
90:32:ce:d0:98:1d:a9:54:7a:4d:94:f2:1f:f4:b5:
e2:43:91:b4:55:d2:9e:26:18:d1:82:93:88:ae:77:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:1A:C8:8E:F6:A7:44:E5:FD:89:40:A8:2F:37:2B:01:AE:27:FB
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:95:2d:6e:a0:6d:35:a2:b3:26:af:05:ba:50:27:c4:17:c6:
5b:d9:ce:ab:0f:da:1f:e6:9f:da:0b:f7:2b:46:6b:88:f9:d8:
ff:44:0f:14:51:e1:2b:d7:97:57:fc:d6:cf:9b:0b:1e:69:96:
e8:99:5e:d0:51:3e:65:d2:63:ff:87:d5:83:ae:d5:8b:0e:58:
55:a7:7d:d4:7b:8e:23:33:9f:26:f7:89:6c:91:98:b4:f9:48:
66:9c:aa:20:47:f9:b2:3c:78:a4:ef:65:fb:a7:02:2c:73:5d:
15:1a:f3:dc:0d:65:83:1a:37:43:06:1e:c7:a1:64:24:cc:f3:
fe:1b:2e:fe:b9:0e:50:a9:56:a4:e8:03:06:a8:66:04:a9:26:
e0:05:89:56:64:d1:e2:3a:26:9a:2a:14:61:c7:a5:a0:b1:c9:
cb:9d:a2:b4:ad:89:af:2c:03:b6:4a:ea:f5:41:a7:62:6d:20:
40:c3:df:e3:01:48:f4:b9:e1:09:16:1b:7b:db:18:da:ab:4f:
96:1c:48:f6:c5:cd:ec:97:91:cf:94:c9:7b:0a:a0:97:77:a5:
ee:28:7d:79:cb:f7:96:4c:61:97:63:72:a1:b6:f8:4a:95:e7:
a0:fc:72:b4:45:6b:d4:ea:be:4b:34:6a:70:69:65:59:19:04:
1f:75:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:17:58 2025 by rpki-client