Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: 8+v20Ani/ykPW2sLikaLqJ8+U0ULpytjE0XQ9o2BuDE=
Subject key identifier: BC:8A:40:4B:68:20:FC:79:59:AA:F8:6E:5F:97:DE:A5:26:D4:5A:56
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 01976E502D59764996084413A98813764D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 12:00:37 +0000
Manifest this update: Sat 14 Jun 2025 12:00:37 +0000
Manifest next update: Sun 15 Jun 2025 12:00:37 +0000
Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=)
2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: stJIS0KbCfrbWx1XcFMdG1LmkrNmnbnmtm6rjfGc5sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:2d:59:76:49:96:08:44:13:a9:88:13:76:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Jun 14 12:00:37 2025 GMT
Not After : Jun 15 12:00:37 2025 GMT
Subject: CN=bc8a404b6820fc7959aaf86e5f97dea526d45a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:e3:48:a9:0d:63:de:40:4b:72:82:35:c0:
95:d0:1c:7c:bb:29:c3:f3:8e:2b:e4:a6:3a:35:fd:
2f:65:9a:9e:a8:c5:0e:eb:76:da:92:c9:1c:30:71:
38:3c:78:5e:27:70:35:6a:f1:28:0f:d3:84:8d:13:
c3:c8:08:99:1c:f8:2b:84:28:99:27:57:dd:d4:73:
06:42:7e:7b:c7:4e:ac:2c:f7:8a:48:64:15:be:77:
dd:8d:a5:d7:e4:5e:7e:cd:56:8c:ed:cf:ec:d8:38:
3f:99:d8:2c:6a:ee:79:c0:72:32:d0:59:b1:6a:77:
de:04:e0:35:63:be:de:e0:f1:b1:cc:39:4d:bc:0b:
be:2e:26:c8:87:08:68:39:3f:5c:d4:a9:69:04:54:
4e:04:2f:ce:17:16:7d:08:c0:c9:d7:0b:d2:ea:85:
c1:c1:d4:55:b9:57:e8:e7:2d:a7:ec:88:a4:f6:03:
20:53:bb:05:0d:f9:a5:03:16:3c:e0:2c:ad:36:55:
e5:22:ab:b4:52:cc:0a:ad:fc:d3:81:88:be:48:c1:
0a:13:80:9d:0e:57:e1:57:f4:d1:02:5a:ea:d3:54:
a2:4d:68:ae:94:69:98:15:fc:73:0e:60:ca:a9:98:
81:01:6a:4d:7c:71:f2:87:dc:5f:02:fb:bd:9c:e0:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:40:4B:68:20:FC:79:59:AA:F8:6E:5F:97:DE:A5:26:D4:5A:56
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:21:1f:fe:53:84:04:00:8e:e2:4f:c2:f6:b9:1e:1f:c9:8a:
15:dc:f2:f2:2e:f1:36:91:74:28:5c:c2:cc:f3:91:e3:37:81:
65:5d:8c:b8:ba:dc:b9:0b:c7:aa:5e:65:db:ec:87:a0:92:69:
e7:11:e7:d1:59:36:66:b7:03:71:aa:dd:ca:ab:44:70:4c:9c:
83:58:86:10:66:d7:9f:7c:12:70:f2:b6:b9:55:87:a2:30:bb:
84:48:20:a2:d1:74:19:f1:ec:57:0d:a0:8d:21:8e:05:f7:31:
bf:d9:d5:ce:7d:f4:e4:2f:5a:fa:64:7a:76:6f:f3:3a:3e:cd:
f8:b9:df:22:c3:53:c2:a8:eb:0d:87:1b:54:c5:78:37:51:7c:
37:e2:08:dd:61:80:c5:53:60:61:f3:07:e9:ea:e4:83:d0:b7:
84:17:f4:45:d7:d9:a5:6f:ff:01:6c:64:c1:e6:e1:c8:12:99:
7e:f1:48:2b:e3:e3:eb:51:27:63:18:06:f0:06:2f:46:4f:c5:
92:87:d0:98:ef:c8:85:bb:13:a1:a8:34:9b:7c:ad:0a:49:7a:
a7:7e:ae:95:75:04:c8:cb:b4:f1:e7:4c:62:be:db:8c:4f:cb:
bd:75:55:3e:20:14:4a:66:c6:ae:5a:de:95:bd:a4:a9:ec:67:
11:77:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:43 2025 by rpki-client