Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: u6Oq8K6Bim2+q7udtB+VBz5iYDOCc53/Uqd3nWOWNOk=
Subject key identifier: F7:60:0C:3C:81:30:91:2A:C3:ED:A9:97:5C:26:23:FF:9D:7B:3A:6C
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0197700823F2EF3BDB3A898BE5CF957C3163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 01EA
Signing time: Sat 14 Jun 2025 20:01:11 +0000
Manifest this update: Sat 14 Jun 2025 20:01:11 +0000
Manifest next update: Sun 15 Jun 2025 20:01:11 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: B8pNY3NGQk2KgB5SySbzm1n/Z8j3+wNgveaSuxo77FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:23:f2:ef:3b:db:3a:89:8b:e5:cf:95:7c:31:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Jun 14 20:01:11 2025 GMT
Not After : Jun 15 20:01:11 2025 GMT
Subject: CN=f7600c3c8130912ac3eda9975c2623ff9d7b3a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:2c:bd:40:1f:a9:50:b6:ec:6c:e1:6a:f6:
87:ff:9f:c8:dc:3e:77:5d:2d:23:b3:7d:b4:07:62:
39:ed:9a:db:99:9b:09:1f:b8:98:4a:dc:7d:f4:68:
fb:fc:00:ed:9c:53:f1:5e:89:dc:f9:07:05:92:7f:
ad:78:f6:18:89:a5:62:58:67:01:e8:e3:7c:eb:18:
b2:7f:fa:f3:a2:a1:2d:d6:d4:82:19:68:6e:10:f9:
cd:53:ec:f1:44:6a:ed:54:ff:c6:b5:20:32:ee:88:
ed:98:5d:9a:69:44:8e:83:b3:c5:5b:85:e0:c9:2d:
f1:51:89:81:bb:f6:d9:13:af:51:8f:ee:21:2a:65:
6c:37:dd:fb:76:a3:79:6d:37:a1:4a:c7:d3:f3:ed:
87:9c:71:bc:44:d1:4a:e7:83:5b:16:6c:64:7b:44:
7d:9b:e7:d5:9d:92:54:35:2d:e3:72:51:4b:75:c1:
bd:7c:52:f0:d8:09:94:72:b3:9b:ab:d9:ca:c9:3e:
d3:b2:24:6b:3b:b8:fe:3c:9d:0a:4e:65:1a:ff:f1:
3f:94:ef:e4:e0:2f:23:9a:e9:cc:5f:37:b5:3e:ab:
b4:99:65:20:d4:02:05:53:13:17:44:20:19:d9:2b:
88:d7:95:95:c5:1b:78:ac:cf:d5:e7:75:34:42:e5:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:0C:3C:81:30:91:2A:C3:ED:A9:97:5C:26:23:FF:9D:7B:3A:6C
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cf:2e:9f:60:c2:66:5c:4d:d2:0a:bc:c8:65:5b:74:80:b7:
ce:fe:4d:61:5d:dc:24:e5:1c:9b:5a:0a:94:a5:82:6e:75:ae:
12:85:34:c6:91:98:5d:6f:39:ad:05:ae:76:8a:9f:aa:19:4f:
e4:d7:d9:d3:8c:01:7b:3a:18:16:a6:63:2d:4b:da:0d:6c:8a:
0d:62:af:39:f6:7c:15:fd:55:09:30:ff:93:44:61:c4:3f:f3:
37:cd:b0:5e:0c:48:02:4f:07:e9:05:82:d4:f5:1c:8c:3c:dc:
60:a0:4e:15:87:80:2f:c1:61:b2:9e:86:28:a8:7c:a1:24:21:
59:62:d7:ab:59:d7:48:29:b3:d8:22:9a:0d:5e:ce:5b:d4:33:
78:fb:e6:9b:94:0e:55:d8:a9:02:07:01:51:6a:01:6b:7e:b0:
82:81:33:6b:c5:92:f9:cb:b9:47:eb:ef:17:89:8e:01:f5:71:
99:4b:e0:0c:6e:c2:53:9c:65:ab:5d:f1:49:55:c7:5c:bd:5e:
18:d7:65:e0:50:fa:7d:90:dc:8d:b1:4d:4e:be:3f:7c:bd:c5:
a1:9b:24:9c:4b:97:a8:06:e3:4c:c9:04:89:2f:40:97:d3:c2:
1f:c1:31:5b:ee:aa:d1:78:0e:e0:8f:36:52:78:44:50:4d:f5:
01:3a:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:15:10 2025 by rpki-client