Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: QSg3I+g1HHrodrJCcc/lLY/O3qcXWnxbnmW3ED4LAZc=
Subject key identifier: 95:8F:C1:16:EC:F2:27:00:AC:41:47:58:25:8C:A6:9D:F1:A5:EA:45
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019768BBECCE5CAC49829EA6268BC15857E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 10:00:35 +0000
Manifest this update: Fri 13 Jun 2025 10:00:35 +0000
Manifest next update: Sat 14 Jun 2025 10:00:35 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: hQMrfb0XpuXmg3YZ+4eba/iH6AZty6cNo29kGZngr9Y=)
2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ec:ce:5c:ac:49:82:9e:a6:26:8b:c1:58:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Jun 13 10:00:35 2025 GMT
Not After : Jun 14 10:00:35 2025 GMT
Subject: CN=958fc116ecf22700ac414758258ca69df1a5ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:04:68:b3:4c:e3:f9:56:85:0d:f5:70:79:
90:bd:76:53:88:48:d7:79:9e:6d:0b:ec:39:28:08:
0c:8b:d2:d8:e2:14:11:92:e9:74:2f:58:9b:c2:c0:
4b:ec:23:4f:d9:50:61:8f:8f:b5:e6:1f:f9:1a:83:
d8:3d:90:51:4a:d8:62:8e:12:c5:85:8d:9a:3e:82:
e4:03:72:0a:29:09:7b:ca:31:87:61:36:e1:82:a7:
70:c0:af:c6:ad:e8:20:35:eb:c0:05:64:3e:7c:fd:
9f:4d:b9:e8:65:41:51:ff:99:ae:b7:26:1a:6d:66:
8e:8c:78:54:a7:02:85:39:04:b4:90:f7:e7:25:0a:
51:53:10:69:2a:16:17:06:ad:ce:eb:df:2b:6b:15:
71:82:30:95:2b:6a:d2:9c:cc:ee:dd:7a:53:bd:e6:
9c:bb:83:c2:57:42:a9:79:a7:da:f3:df:17:04:e5:
92:75:ca:36:5d:49:1c:74:e8:3f:6a:ff:44:0c:40:
8a:25:22:8e:eb:ee:4d:95:26:bf:2f:d9:a8:d8:32:
00:5e:b2:8b:6b:0e:e7:23:9d:28:e2:ff:70:ea:e7:
ae:81:13:25:63:cd:1b:bc:3d:ef:9e:6d:29:d2:72:
12:9b:c6:fb:56:65:92:39:c0:bb:bf:09:81:83:f8:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:C1:16:EC:F2:27:00:AC:41:47:58:25:8C:A6:9D:F1:A5:EA:45
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:67:42:71:0a:f7:51:fb:4c:47:31:dc:4a:46:73:90:92:3f:
8d:19:60:e1:19:a9:4f:1f:c1:ab:aa:1c:4f:40:99:eb:d0:9b:
48:03:83:cd:74:74:e2:3b:47:2d:58:65:bb:57:08:87:97:95:
dd:48:b7:da:4c:c7:77:1a:c1:74:89:6e:55:40:75:a9:9c:aa:
16:bc:d8:2f:6e:5e:f4:5e:52:6e:35:af:50:83:ba:a4:9d:cc:
b3:a0:fe:80:2c:6b:a9:27:40:91:0a:86:3e:90:83:ad:25:43:
5e:70:ce:34:a6:e0:9d:68:1c:c0:fa:48:8b:cb:70:d3:92:21:
fd:ec:37:0e:40:68:10:6e:75:90:45:8f:78:46:e3:50:f6:db:
d5:5a:fa:9d:2d:95:c2:04:ad:cc:95:a0:d7:31:ef:e0:99:00:
b7:b6:83:05:63:cd:f9:6b:c4:05:12:8a:06:6a:2c:ed:df:9f:
21:52:d8:d4:2c:15:df:78:3a:ae:4d:2d:64:f5:fc:1a:c6:63:
07:6a:de:88:bb:35:f0:77:66:0d:04:8e:a1:17:aa:d5:75:fa:
49:7b:fa:ce:4e:e3:a6:8c:00:11:0c:a0:c7:c4:34:96:05:cc:
79:bd:fc:88:36:24:2b:75:83:9d:07:84:88:b6:73:12:ba:00:
59:fe:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:32 2025 by rpki-client