Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: 68t7MvRrCAcaQ+nhmIB1ci8SyAiAeNykgdbq2pPxvUM=
Subject key identifier: 77:12:EC:9B:B0:D5:A5:70:F4:47:F3:F8:A6:0D:F9:5E:41:10:B3:89
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 0197895921274BB2D54F876B69679A8E8221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0C45
Signing time: Thu 19 Jun 2025 18:00:08 +0000
Manifest this update: Thu 19 Jun 2025 18:00:08 +0000
Manifest next update: Fri 20 Jun 2025 18:00:08 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: KUyBaUQdO2zb+i5xivH8fb3eY2sEtUbK5+0uK15e+uY=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:59:21:27:4b:b2:d5:4f:87:6b:69:67:9a:8e:82:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Jun 19 18:00:08 2025 GMT
Not After : Jun 20 18:00:08 2025 GMT
Subject: CN=7712ec9bb0d5a570f447f3f8a60df95e4110b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:e5:bc:08:1f:9b:8f:6d:dd:bf:49:3f:b0:
cf:c6:68:1b:c4:62:cf:7d:bb:16:0c:85:24:71:26:
73:10:00:96:ab:fd:89:6b:b7:3e:3e:58:f7:cd:7a:
5a:c6:53:ac:4f:a8:ac:2c:58:77:1f:93:da:a1:e7:
c8:de:8f:ea:de:aa:2a:18:30:4e:b5:13:95:44:97:
7e:ef:b3:ea:18:d0:9f:28:9a:da:a1:39:16:10:d3:
7c:9d:10:bb:b2:35:6a:5e:d9:53:74:08:ef:9e:c4:
a4:75:14:69:2f:b2:57:9f:af:48:3d:aa:0b:6c:b2:
e5:96:d2:9a:52:0f:76:16:39:f9:e6:8f:26:f9:75:
e4:ed:ab:5d:c9:e7:b5:d1:f2:3e:c6:e7:d2:c6:d4:
69:45:e2:39:3f:65:c0:97:a9:4e:74:15:cb:8d:49:
ff:bd:cb:17:24:f8:e7:ed:f6:11:92:4f:29:e0:a6:
6f:15:d8:8a:07:71:3a:74:62:e8:5f:24:00:7d:41:
c6:02:f3:61:42:cc:9d:3d:80:0c:d1:7b:f0:d1:d4:
9b:63:46:5b:9a:1c:27:6c:5e:dc:61:33:b8:60:d6:
5f:fb:48:fe:77:77:f9:25:4f:67:10:ce:cc:7f:98:
90:fd:25:ad:df:f8:31:46:3d:4d:4f:aa:e1:b0:5c:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:EC:9B:B0:D5:A5:70:F4:47:F3:F8:A6:0D:F9:5E:41:10:B3:89
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fd:55:6f:8d:be:e3:14:44:a4:f8:27:f1:28:c7:fa:d6:f6:
82:70:97:ad:39:fb:87:2c:08:07:1d:13:50:66:49:81:55:62:
db:02:d5:f8:e7:d4:fb:f3:b6:a5:ed:57:90:e5:20:45:48:4d:
18:7d:ab:86:f6:aa:cf:e2:e0:0b:38:e3:a4:ba:1f:69:24:6e:
42:24:a4:0b:e0:a8:66:38:84:51:e3:b7:77:6a:dd:02:5e:1e:
65:1f:9c:59:7c:ef:73:df:e7:c6:92:61:cf:d0:9d:37:f9:fc:
07:67:63:da:b9:8b:f6:83:55:35:fc:dc:fd:4f:85:77:4b:32:
00:c2:fc:c7:82:9f:e0:5e:dc:73:19:19:6c:98:ba:bb:69:a8:
89:5b:a4:dc:9a:7d:89:0e:28:d6:34:5a:59:af:92:31:88:a4:
1e:e1:11:b5:e0:e3:02:98:53:d1:a7:f7:4d:e9:75:96:db:54:
28:35:a2:7d:55:2f:5c:03:f8:5b:90:c3:4d:76:11:37:d1:1d:
ab:42:b8:95:ad:d6:b5:d5:e1:65:ac:40:d0:5b:c0:87:4f:48:
9a:cb:aa:53:07:28:d8:ef:56:1b:d5:1c:6b:d5:e6:7b:bf:2c:
bb:f7:35:a2:9c:fe:08:53:76:b7:21:9c:b4:08:c8:cb:01:e0:
c3:6f:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:54:52 2025 by rpki-client