Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: ymQk97yO+df2GRgLe509SI/Ty10jyhr3q30sN8NIXPo=
Subject key identifier: 5C:B9:2B:E3:D6:CD:E5:4B:69:91:20:13:37:A4:19:87:21:DE:C8:04
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 01976BBCD2FEB9827CB8F151EB02F29A6FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 109B
Signing time: Sat 14 Jun 2025 00:00:26 +0000
Manifest this update: Sat 14 Jun 2025 00:00:26 +0000
Manifest next update: Sun 15 Jun 2025 00:00:26 +0000
Files and hashes: 1: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=)
2: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: S0h4WXFYded6Dnn3UKgcUsWJLPQs7cMxmJPilB+lPic=)
3: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=)
4: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (hash: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d2:fe:b9:82:7c:b8:f1:51:eb:02:f2:9a:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jun 14 00:00:26 2025 GMT
Not After : Jun 15 00:00:26 2025 GMT
Subject: CN=5cb92be3d6cde54b6991201337a4198721dec804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:1d:b4:04:52:61:65:af:f9:5e:6e:a0:24:
b1:85:ff:b1:93:c6:9a:0c:a8:e0:d5:d0:19:79:9a:
6b:ff:92:32:e4:db:ae:71:cc:27:94:0a:83:a2:13:
00:0d:f8:94:5a:50:cc:cc:65:ef:30:0c:27:fa:f6:
f2:be:b1:5a:0e:88:7b:e5:aa:95:40:5b:66:1c:5d:
87:e7:e6:80:e8:56:df:74:9c:2e:a5:8e:fa:fb:04:
29:b4:27:47:d3:47:4b:7e:0a:d7:2e:98:ad:5a:6b:
77:3e:77:16:b1:14:ec:2d:36:e6:bb:a9:d2:d1:36:
cc:d3:f9:4c:6c:a5:99:5e:1b:58:32:83:33:67:38:
81:22:e8:93:75:6e:26:37:87:01:98:3a:4a:aa:d9:
a7:f5:e3:dd:7f:99:ab:a3:27:82:3d:c6:6f:4f:6d:
46:af:fa:18:9b:e2:aa:ba:a6:3c:08:cd:05:c5:21:
eb:b3:4a:2d:11:51:bd:ec:00:d3:59:a0:19:b5:97:
fe:e8:e0:31:5b:b6:af:af:8d:7e:24:cc:c0:38:db:
04:66:00:f6:44:4c:dc:92:a2:74:fb:91:e5:82:31:
82:cc:57:4a:18:20:e0:64:ba:b0:dc:51:61:87:02:
f5:bb:64:dc:32:c9:7e:bf:1d:df:19:a3:30:88:6f:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:2B:E3:D6:CD:E5:4B:69:91:20:13:37:A4:19:87:21:DE:C8:04
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f0:cf:78:32:ef:9c:3e:ad:eb:de:70:23:34:ed:d4:b7:d1:
81:0b:41:e7:1b:ac:c6:d8:db:42:1f:74:d7:bd:aa:12:21:e3:
5e:98:bd:5e:34:d2:c3:93:fa:39:1a:8a:0d:76:f8:d2:6e:45:
e3:6b:81:c2:f4:1b:4a:b2:58:b1:2c:e0:46:14:31:fc:42:89:
90:5f:c7:63:17:2b:18:df:cf:b7:86:84:69:6a:6d:ba:7d:8b:
75:90:f9:1b:ed:44:55:f3:ef:a1:ae:a2:3d:e3:66:04:87:c9:
3d:dd:ed:36:3e:94:92:0f:95:dd:bb:a6:81:5a:a4:2d:37:55:
11:b0:32:f7:dd:9e:64:95:6a:35:0d:71:fa:cb:46:ef:4c:42:
98:da:71:f7:63:98:2c:12:52:dc:cb:44:1b:f2:46:a9:73:6e:
74:8e:b8:db:97:eb:6c:02:24:db:6a:6b:54:d6:33:c9:f6:68:
5a:9b:bf:20:46:f6:79:0a:6c:a7:0e:5b:40:16:0f:7b:df:d9:
c6:4e:bd:fc:66:51:10:35:fb:20:88:8b:ea:a1:47:f8:6d:8b:
35:cd:58:b2:23:ba:35:c2:9c:66:18:46:be:ac:81:05:dd:a0:
38:72:81:d1:1d:b6:2e:ea:f2:9d:39:cc:21:3c:07:b3:cd:6e:
ce:38:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:49 2025 by rpki-client