Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: nFsy7sXHsaHQHWLvAKEGFQ5PGMi10xKILC/nBez9xOA=
Subject key identifier: 45:8E:A1:7B:CF:68:A2:E3:17:94:A4:BF:F2:95:1B:B8:D8:39:2D:0A
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01976BBCE8133CEE8DF6371A77189E42DE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 148F
Signing time: Sat 14 Jun 2025 00:00:31 +0000
Manifest this update: Sat 14 Jun 2025 00:00:31 +0000
Manifest next update: Sun 15 Jun 2025 00:00:31 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: wik9d9qjQsFH3pfNIM29qm+CIHtBEV2Z1U8Th+c4fhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:e8:13:3c:ee:8d:f6:37:1a:77:18:9e:42:de:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jun 14 00:00:31 2025 GMT
Not After : Jun 15 00:00:31 2025 GMT
Subject: CN=458ea17bcf68a2e31794a4bff2951bb8d8392d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:d0:4a:bc:12:aa:49:ee:cc:29:58:c3:ac:
50:52:90:10:ee:6d:18:68:59:fe:64:05:26:8a:00:
58:b5:ed:ca:38:3a:0d:76:86:ed:a6:9e:58:88:c1:
84:d3:19:de:aa:14:62:7e:d4:7c:9f:53:82:4a:38:
f5:5f:3b:98:0c:2c:ac:a8:6e:bc:12:09:b6:80:97:
4e:ef:e2:f3:aa:5c:31:c3:b1:e0:06:92:8b:a2:63:
2e:77:7a:8b:22:6e:a0:24:18:e7:54:66:cb:d9:b8:
fe:5e:de:8e:a0:1b:37:8c:43:2c:56:17:79:92:2c:
60:d9:2c:e3:44:c1:7a:08:e2:47:3a:99:8a:32:d0:
45:23:eb:17:3c:91:1c:2f:0e:43:99:3a:ca:5e:05:
0a:11:64:a1:dd:7c:2c:f0:8d:d1:c6:8b:04:84:af:
9f:a6:d8:2e:b7:e4:7e:ee:e3:80:26:c4:38:40:c6:
74:cc:f3:47:ff:09:c8:03:37:35:73:ae:95:f1:b9:
15:fa:28:30:04:49:f5:68:60:b2:a3:c6:6e:e1:b4:
f0:5f:f9:5e:85:55:f8:78:50:de:25:6f:1b:0c:c3:
3d:9b:95:dd:e5:ad:ee:91:f9:02:62:56:ac:ee:01:
15:e9:2f:49:6d:30:b9:66:f3:31:36:30:3d:53:7f:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:A1:7B:CF:68:A2:E3:17:94:A4:BF:F2:95:1B:B8:D8:39:2D:0A
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:37:c9:f5:1d:43:3e:d6:8e:ae:e0:8a:71:17:3b:6a:75:
e1:af:63:67:59:51:d4:ff:25:87:c5:38:ca:17:d7:5b:87:43:
85:59:b1:ee:6b:48:20:28:b3:aa:9f:bc:ff:85:65:d2:78:0e:
22:fe:f0:a2:42:1c:a3:b0:dc:13:b5:94:a8:de:b9:1b:4b:da:
2a:ed:6b:90:89:0d:a3:ce:af:ea:3f:ca:0c:9b:4a:54:6b:6c:
e8:56:10:33:f7:20:fb:bc:bb:cd:50:0a:e3:87:56:17:6b:d5:
b5:61:b9:7f:66:20:b2:28:29:d9:f7:7e:49:67:80:06:e6:6f:
97:5f:bd:20:50:42:a7:73:a9:6b:97:02:d0:39:6d:0e:86:ce:
10:1d:3b:44:e9:f4:a2:9e:77:6c:6e:39:ac:67:b6:fc:ba:20:
d9:00:f1:d9:e8:91:f7:5c:e9:8c:00:dc:4c:2e:ae:ae:25:b2:
61:cb:3e:b6:5a:1f:8b:9b:9f:7d:f1:48:be:82:08:a6:75:e2:
74:c3:f0:92:54:83:3b:0f:31:69:e4:3f:8e:8a:92:28:2a:d6:
86:24:6c:fd:59:d2:88:ed:93:47:64:4c:60:4d:cb:14:4a:3d:
16:b2:fc:2d:47:1d:09:ff:6f:f6:ed:fc:32:9a:1d:e6:3a:ba:
b5:7b:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:49 2025 by rpki-client