Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: X3S6+zvK9Wsdd7kR5Xv4LVTI635qoQR0w3quIo9mWDU=
Subject key identifier: AF:EC:28:60:FC:10:D4:93:11:97:8F:AE:39:00:62:2A:03:DF:B2:CA
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 01976DAB98C0C1ADE916B0564CEA59E819A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:00:51 +0000
Manifest this update: Sat 14 Jun 2025 09:00:51 +0000
Manifest next update: Sun 15 Jun 2025 09:00:51 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: co/eeXy21qd32JVRgGjsZLpUGIITYKHhMYKXHV2aS8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:98:c0:c1:ad:e9:16:b0:56:4c:ea:59:e8:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jun 14 09:00:51 2025 GMT
Not After : Jun 15 09:00:51 2025 GMT
Subject: CN=afec2860fc10d49311978fae3900622a03dfb2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:44:8c:20:2d:ee:e8:b8:81:5e:e0:34:ca:
07:7d:c6:cf:e4:32:c1:c8:c9:8f:dc:3b:94:61:cb:
ab:f9:4b:6e:9d:de:ec:cd:14:5c:78:b2:5a:fa:92:
0b:ea:e9:51:13:6a:3c:ec:e7:6e:a4:0f:30:0a:36:
ff:ad:44:b0:a4:23:ac:88:a3:2f:f6:39:fc:d9:91:
ff:eb:70:ee:3f:3c:4f:e6:d1:6d:1d:4f:8d:c9:23:
d7:a0:4a:91:ff:cb:c7:1d:09:23:97:0c:6b:f6:61:
99:2f:cb:87:29:6e:27:89:c5:14:6c:4e:77:a5:41:
75:a8:42:5e:e8:41:a3:c1:82:f2:d0:5a:e1:52:95:
77:6a:31:fc:f5:2a:3c:ad:6b:ec:77:05:42:a7:e6:
29:38:dc:23:34:4b:95:0c:5f:7b:79:f4:c8:9c:4f:
7a:3a:23:98:43:86:1b:a7:d0:43:d2:a0:c6:04:f0:
18:fb:de:0f:02:98:bc:f9:5f:88:5f:36:a0:8b:fb:
a0:92:2a:b2:59:eb:41:3f:7c:5b:96:fc:20:55:18:
18:fb:0d:2d:69:26:e0:4b:ea:b8:59:a7:44:99:90:
61:87:0c:be:9e:6f:81:5a:85:c3:5d:05:36:44:98:
61:95:3f:df:e2:bf:7f:67:e7:da:f0:d2:9c:04:3b:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:28:60:FC:10:D4:93:11:97:8F:AE:39:00:62:2A:03:DF:B2:CA
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e5:0d:58:8b:b6:05:21:be:0a:b8:0c:c7:36:8f:77:73:be:
29:f4:93:8e:cb:58:9e:e5:62:78:39:72:47:f1:dc:82:37:f4:
ac:8d:3c:51:ed:4e:41:9b:03:ee:3d:5d:91:db:c5:f6:18:27:
07:3a:c3:cb:83:84:aa:42:a9:55:e8:ba:31:8e:1f:48:44:c0:
a5:91:0c:dd:44:41:67:a3:dd:49:6f:92:49:eb:06:f8:16:16:
d1:53:ee:d3:3d:2c:bc:b3:2d:db:5a:df:30:f0:a9:77:6c:ef:
50:d2:71:73:62:60:cf:31:a3:43:cd:a8:d6:45:c9:3c:12:78:
60:f6:20:2c:ee:44:2a:11:4c:30:cb:28:8f:92:23:3f:c8:22:
6b:b3:ad:3b:90:94:b0:51:9f:7d:c7:01:15:18:bf:41:36:4d:
2f:0b:69:cc:7b:45:c1:09:f5:14:f0:19:59:00:8c:c5:b3:47:
26:39:ea:4d:bd:86:a9:d6:e5:1d:b3:b3:ed:f6:33:bd:07:9b:
d3:9b:f2:a5:34:7a:5f:f2:58:f6:f1:c9:b8:e5:d6:4a:f9:4a:
74:ef:e8:12:10:b6:09:99:e5:fb:00:a0:15:54:0f:aa:c6:3a:
eb:f4:c6:4d:87:01:28:f2:3a:f4:50:a3:bc:6b:b5:58:5c:12:
4c:e5:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:49 2025 by rpki-client