Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: yHu6J0++CH3W4OsL1Yf3WjFSUbn3oRuN2uZpjUFE73A=
Subject key identifier: AB:2F:9A:1E:69:54:93:75:7C:55:21:DF:5D:EE:61:C5:5A:C5:7E:E7
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019771BFA31D8C0F33C2F371A19451DBA5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 04:01:13 +0000
Manifest this update: Sun 15 Jun 2025 04:01:13 +0000
Manifest next update: Mon 16 Jun 2025 04:01:13 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: F6zygd26M88gMokTdJ3Cs6dpNafQVlUoh0iEgMMgri0=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:a3:1d:8c:0f:33:c2:f3:71:a1:94:51:db:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Jun 15 04:01:13 2025 GMT
Not After : Jun 16 04:01:13 2025 GMT
Subject: CN=ab2f9a1e695493757c5521df5dee61c55ac57ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:af:88:bf:e9:1c:bb:71:24:09:a9:98:e5:
4f:76:0a:0c:50:7f:86:04:f5:c8:99:b7:67:8b:9e:
66:7a:bc:13:7d:22:fd:af:1e:b5:14:58:19:72:97:
50:59:8d:ad:f0:68:9e:17:3d:b1:a3:25:ef:22:35:
a8:2a:59:96:09:1e:97:95:e2:c8:71:0e:b8:aa:6c:
cc:2a:88:ad:02:57:56:40:7f:f0:54:88:7f:b6:05:
ce:83:01:65:c1:1e:2b:c4:bb:07:00:5c:88:9f:54:
a5:6d:b0:81:ac:cd:54:f8:92:7e:a8:61:91:99:82:
8a:53:4b:c8:21:ba:67:97:40:d8:e1:60:08:ae:a1:
cd:2d:db:bd:f2:31:31:67:f0:b7:44:89:69:fb:e9:
c5:a5:fa:68:37:86:e1:85:69:92:fe:54:26:75:78:
67:4b:7e:f9:61:35:b7:91:0a:23:c4:6c:8c:68:1e:
1d:81:7d:1c:a4:03:1d:c5:48:b3:12:e7:73:b4:da:
e7:59:04:54:98:e0:34:a2:7a:6d:b6:09:19:2b:34:
d0:3d:8c:d3:5b:b1:02:ca:9c:ba:f8:17:c9:14:fb:
77:5e:af:f7:2c:93:5f:45:dc:05:9d:97:2e:97:0f:
aa:68:0e:81:d4:6e:8d:bd:e7:63:bc:a8:c9:28:29:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:9A:1E:69:54:93:75:7C:55:21:DF:5D:EE:61:C5:5A:C5:7E:E7
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bf:da:6b:e5:cb:17:f7:fe:cb:65:96:90:be:f0:0e:6e:0a:
d0:f8:35:4d:6e:3b:fe:06:1e:b8:5b:a5:ca:d3:3b:d7:0d:30:
1a:83:8a:8a:45:bc:bf:71:85:db:bf:69:09:b2:37:aa:a5:ee:
f2:87:b0:04:f6:6e:3a:53:8c:26:71:3c:98:46:b9:7f:e8:62:
22:cd:23:55:43:eb:b3:df:11:1d:c5:6e:10:05:8e:89:74:a7:
92:d5:5a:a3:a6:45:87:ee:2b:37:52:18:d2:55:ba:ed:2a:33:
ef:67:7f:0a:59:11:8a:69:95:e8:a7:9e:33:4f:0a:71:96:56:
e0:ba:3e:51:85:66:6a:b3:6e:85:4f:56:eb:84:f7:19:18:04:
a3:58:98:5b:42:5f:4a:d0:aa:d1:e1:19:81:98:0d:22:c8:ca:
46:9f:64:98:fc:3d:65:e9:59:60:6d:fd:07:6e:fa:39:a0:40:
2f:31:07:be:9d:32:9d:7d:db:00:b8:22:10:ec:23:d4:3c:ce:
c1:a1:2c:9a:98:e9:88:21:dc:85:53:e9:b5:5c:7a:fa:58:47:
a6:07:c9:c6:62:9b:1f:2b:1c:4c:fe:2e:84:c3:13:e5:c4:0c:
23:1e:88:05:83:28:77:24:70:7f:36:09:b5:68:dd:d8:41:55:
7f:1e:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:27 2025 by rpki-client