Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: KJvLoznZsoUg4qy4fMo/YM16L2x7Mt7YXntPudSHtks=
Subject key identifier: 33:6B:9D:7D:12:1E:4A:5A:01:BC:C7:AA:15:C2:74:11:00:6F:0F:18
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 019769609A6B35F5565833044373AA937C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0BE0
Signing time: Fri 13 Jun 2025 13:00:27 +0000
Manifest this update: Fri 13 Jun 2025 13:00:27 +0000
Manifest next update: Sat 14 Jun 2025 13:00:27 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: +zaCMmPT501fSYS8cpzk8JciEfMFImOxuMIfE4SJ7Yo=)
2: T2qZTTFWVSNBNeXqRrv5AJne1B0.roa (hash: EWp0bMjXe6eEnMu430F2WwTP+lMlXpj/M+oOz9ex/1k=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:9a:6b:35:f5:56:58:33:04:43:73:aa:93:7c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jun 13 13:00:27 2025 GMT
Not After : Jun 14 13:00:27 2025 GMT
Subject: CN=336b9d7d121e4a5a01bcc7aa15c27411006f0f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:e5:0e:c2:c0:2a:55:6b:a5:33:cf:44:a1:
30:18:05:54:5a:e8:a7:b8:69:a0:83:15:42:50:28:
a1:1b:fc:9b:f8:a2:49:ef:1a:80:d5:d6:01:98:88:
7e:8a:b2:d5:11:84:83:03:3d:19:d4:14:15:e4:c3:
80:26:49:49:4a:51:d7:60:51:9a:cc:09:f6:ef:77:
b1:d3:7d:e8:8c:e0:2e:dd:49:8f:d9:5f:0a:62:0c:
b6:35:80:b1:e8:af:0a:43:c7:a1:5c:81:bb:c0:07:
a9:5c:34:39:fd:c2:31:84:29:ac:f4:93:ea:4c:6a:
c7:cb:47:24:3d:78:f0:55:fc:d6:68:dc:91:d7:b8:
3c:50:bb:97:8b:d6:36:7b:1d:eb:d6:a9:64:81:bb:
38:21:df:12:a2:c1:d6:e3:8d:30:cd:f4:b4:85:7c:
3b:d9:c0:f1:03:6c:d3:c3:c0:91:7f:7c:d3:ed:9f:
39:43:8b:4b:20:ff:ca:c9:cb:c8:e1:ae:35:e4:7e:
9c:a7:72:53:f0:70:83:89:08:ea:30:18:54:26:02:
6f:a6:ff:fc:6c:2c:62:4c:b6:64:70:ec:be:21:ac:
3c:3a:f3:13:bc:16:43:ab:a5:69:88:8c:bd:4e:a8:
c3:89:0e:8f:0f:9f:5c:00:86:0a:50:79:b5:03:37:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:9D:7D:12:1E:4A:5A:01:BC:C7:AA:15:C2:74:11:00:6F:0F:18
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:40:13:44:41:84:24:05:27:ed:49:6f:a6:e9:fc:a7:c6:
66:7c:dc:57:36:8e:01:36:d9:2c:35:70:3a:ab:c5:13:8d:80:
ba:8e:fe:8a:d0:67:14:f4:0c:66:89:a9:09:86:6c:cc:03:20:
e3:fc:fe:d3:ed:5c:81:d4:f8:1c:6b:b5:68:ca:9a:ee:e7:03:
99:35:20:9e:2c:79:d9:af:41:54:e6:e8:36:a7:26:d3:d1:2a:
c7:77:df:a8:f9:a9:57:87:72:54:c2:b1:a3:fc:25:bc:58:28:
12:6b:63:81:30:82:72:87:dc:6b:78:9a:18:57:0f:5c:d0:c7:
99:1d:8c:f0:9f:1c:39:f8:2d:41:db:8e:1c:37:47:22:2b:10:
d3:7e:42:6e:5d:28:bc:66:e5:4a:fe:ec:0d:c4:74:8b:b3:b8:
29:47:7d:98:2a:34:ea:3c:60:89:d4:96:3f:36:57:e3:4d:5c:
3e:6a:b1:0e:ad:f5:fb:40:ca:c5:40:1e:f1:be:a1:4b:2c:0b:
ed:27:12:15:8b:8e:72:21:57:7f:1b:da:b1:a2:8f:5e:bc:b0:
b6:31:7c:32:8b:38:59:25:e0:2c:21:74:46:57:d4:23:f0:c2:
7c:33:60:4f:38:b8:95:26:61:20:4f:4e:95:e9:e8:f2:dd:df:
51:93:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:25 2025 by rpki-client