Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: XZM4AChXMpuPMQY6Ag26WBjIBY+q1UjKlwyRi3IBUNc=
Subject key identifier: 7D:47:F7:F9:BE:E2:32:32:31:22:0F:5A:D8:8A:79:02:2B:91:E7:8A
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 01976D3E6B59B30AC3ECEF86D50593EF7FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0286
Signing time: Sat 14 Jun 2025 07:01:36 +0000
Manifest this update: Sat 14 Jun 2025 07:01:36 +0000
Manifest next update: Sun 15 Jun 2025 07:01:36 +0000
Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=)
2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: oP1zTOU86WVpc0Hl5wA3QYEZ+wZy2b1JOKBb2iRfbEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:6b:59:b3:0a:c3:ec:ef:86:d5:05:93:ef:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Jun 14 07:01:36 2025 GMT
Not After : Jun 15 07:01:36 2025 GMT
Subject: CN=7d47f7f9bee2323231220f5ad88a79022b91e78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:b5:1a:9c:d1:02:dc:da:2c:93:88:05:76:
36:e3:32:8d:71:2b:fb:90:74:f1:08:05:1e:24:80:
8b:8d:ab:8f:68:63:e7:b4:14:a4:b0:0d:60:e6:78:
02:bd:99:28:2d:3f:f7:ee:13:c7:ce:4b:ab:0c:f7:
68:39:f5:3c:86:59:19:15:51:30:90:af:ce:83:ce:
36:6c:ae:4e:3d:a4:de:4a:28:c2:1b:35:03:c9:35:
83:81:9c:b7:f1:a6:94:cf:0d:54:7f:48:16:c3:1e:
12:9f:1e:ba:29:e1:02:ce:34:32:0c:c2:51:f2:b6:
9f:b0:1b:48:98:13:ab:45:23:1a:a4:bd:2b:70:47:
67:05:ff:c4:da:7a:7d:8a:28:dd:7c:3a:a3:03:01:
16:a0:e1:32:66:d1:a0:aa:9c:0e:6d:9c:78:d1:64:
2e:8e:f2:b8:38:e4:99:00:b6:80:03:33:1d:41:8f:
b5:20:60:39:51:81:a0:3f:b0:c0:dd:cd:be:13:70:
30:a7:2d:a3:63:d4:a4:a2:e1:67:aa:cc:31:4c:c2:
b6:f5:bd:f7:2e:c7:8a:29:a5:e8:05:b9:bb:ed:a4:
56:2a:80:04:eb:da:b6:d0:0c:82:fd:12:2f:1a:45:
6b:a8:e1:dc:f5:45:54:aa:b9:0b:82:cc:77:6d:99:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:F7:F9:BE:E2:32:32:31:22:0F:5A:D8:8A:79:02:2B:91:E7:8A
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ce:c7:90:b8:ca:1e:c1:3a:b8:10:a0:2f:31:8a:30:1f:46:
b9:8a:16:5d:66:b9:0c:25:ff:ce:5f:cf:28:49:2b:96:dd:85:
e3:dd:1d:5f:0f:bd:ae:f6:ac:17:66:fa:ae:a7:29:e3:eb:3c:
cf:09:04:6b:fc:51:2d:85:ab:69:f9:86:6c:cd:53:7e:89:87:
49:30:09:5d:9c:b8:f7:17:40:59:25:d2:82:5e:7c:e1:b5:6e:
a2:0a:79:11:81:39:fa:7a:b1:76:1e:03:fd:12:18:18:e1:04:
54:1e:12:c1:7e:36:94:92:ee:c8:6d:be:1e:70:f6:43:5d:98:
72:5d:7a:6c:f9:e3:08:5a:72:b6:ea:2c:00:01:ab:26:0a:dd:
e6:5d:82:ba:0b:66:db:f0:c2:36:da:1b:4e:85:61:c2:3b:e8:
a7:55:e5:a7:0f:6a:41:52:fc:c4:e5:b1:28:af:aa:7e:02:f7:
12:8c:47:44:24:83:d4:7f:74:c7:c1:bf:cc:ca:09:08:9b:a8:
99:51:3f:ee:2e:e6:92:5e:b7:66:fc:44:cf:e9:e3:19:aa:4e:
7b:10:41:bc:80:e4:25:da:3b:5b:cf:55:8b:29:94:f0:19:b3:
19:9d:14:c5:19:c2:5d:dc:43:af:5c:94:a0:c1:54:f7:67:4a:
ab:7f:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:40 2025 by rpki-client