Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: gAeSceHxOc+qY0EP6M6eBAbjCqfka8MBgXZuau8a04Q=
Subject key identifier: 9E:C1:E5:71:DB:00:26:EC:AA:45:65:13:A7:54:A2:26:2E:C1:CA:CB
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 01976E5088200A78755B37135808DE1C5687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 06A6
Signing time: Sat 14 Jun 2025 12:01:00 +0000
Manifest this update: Sat 14 Jun 2025 12:01:00 +0000
Manifest next update: Sun 15 Jun 2025 12:01:00 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: XVdpXq0bwzalv/ZZvhfD2onNJ6n381tm4GhMpHLRQHM=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:88:20:0a:78:75:5b:37:13:58:08:de:1c:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jun 14 12:01:00 2025 GMT
Not After : Jun 15 12:01:00 2025 GMT
Subject: CN=9ec1e571db0026ecaa456513a754a2262ec1cacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:78:9c:e7:6b:5f:91:72:83:d9:ca:2d:1a:
cf:18:c4:9f:a8:87:ed:b3:7d:8c:7a:74:87:de:8e:
a6:c9:4c:42:ec:35:03:3d:fe:86:fa:b0:61:8f:f9:
45:29:66:06:02:85:a0:ee:1f:cf:5a:0a:91:2d:aa:
67:d0:29:54:ee:b5:94:1c:5f:79:0c:8b:d0:7e:53:
25:c3:7c:5f:fd:41:80:71:58:43:08:1c:ba:ff:c0:
a4:49:97:0d:a0:1f:71:89:b4:00:59:73:05:52:1d:
35:54:c1:d9:e5:29:48:36:5c:5a:24:11:a7:3a:95:
ca:0c:21:41:04:8a:c8:07:cd:d0:7b:85:3b:32:94:
5e:4c:f9:0b:a9:7e:40:8e:8c:51:a0:af:2f:47:c4:
37:2a:22:0e:17:17:04:f3:7a:cb:95:d4:41:ea:54:
6c:04:7d:9d:0b:de:40:a3:2d:92:d6:2a:8f:58:c0:
8d:c0:fb:11:18:ea:f9:2b:a2:4b:8a:f3:60:fd:31:
26:4e:b2:de:aa:8f:2d:67:00:78:a1:46:50:c6:6d:
f5:72:b1:ed:43:0c:2c:3c:8b:0c:7a:f2:92:ac:cb:
ec:a2:48:33:79:bd:96:d7:ab:04:63:45:66:a9:df:
fb:90:23:d1:d6:63:14:f9:66:8c:88:bd:dc:88:51:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:E5:71:DB:00:26:EC:AA:45:65:13:A7:54:A2:26:2E:C1:CA:CB
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:68:4c:09:1b:28:97:ad:38:b2:13:35:05:ac:66:60:df:
e4:0e:0f:1a:79:86:e5:36:0b:7e:ff:56:e8:ce:63:a4:86:0e:
57:e4:5a:19:89:21:95:8f:41:26:65:1f:e5:62:bb:00:29:1c:
99:1a:d7:b5:1a:05:a3:14:58:1e:34:c1:6e:a1:eb:bd:dd:f8:
c8:89:aa:a0:14:a6:e5:e5:cf:76:4e:b5:32:99:96:5e:af:18:
dd:2a:dc:21:6f:01:fd:0b:cb:fd:82:03:5e:85:85:47:d3:fc:
1f:0b:87:6f:ea:b2:96:aa:f4:b9:d3:61:b3:83:9f:29:fd:c3:
de:b8:32:42:08:cb:cb:5b:55:d3:9c:cb:2e:a8:2b:f4:23:96:
61:53:a3:cb:e0:7f:20:de:91:da:ff:62:de:05:ce:9b:d5:87:
58:e2:2e:b7:1d:e1:3b:c0:0f:a7:8f:fd:ac:e1:19:6e:95:0d:
b2:71:9b:f2:ed:79:ab:c5:1f:68:11:e7:9c:4b:98:95:94:48:
2e:46:37:9b:62:7c:43:a5:aa:fe:7d:6a:e0:b7:92:69:5f:c7:
fe:9a:b6:a6:e0:d8:b1:7f:4e:e4:6c:cd:0e:fc:d3:cc:3c:9c:
e9:82:e1:8b:99:f9:a3:17:1e:b7:bb:55:f4:52:01:ab:a8:07:
df:49:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:04:30 2025 by rpki-client