Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: /MX7uJretIOoAE8P6pBYUDyXWAv7qiPLUSyo9SasHN8=
Subject key identifier: 1A:87:B4:84:32:21:D8:39:93:60:66:C7:0A:19:AD:C6:94:DE:55:0B
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 01977609B29A0D5FE9CF3059444D444FFA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 00:00:36 +0000
Manifest this update: Mon 16 Jun 2025 00:00:36 +0000
Manifest next update: Tue 17 Jun 2025 00:00:36 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: 4WbxN34A0uxIK/fiZhXM6dbLVX6aDa6N5I2pngGzdus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:b2:9a:0d:5f:e9:cf:30:59:44:4d:44:4f:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Jun 16 00:00:36 2025 GMT
Not After : Jun 17 00:00:36 2025 GMT
Subject: CN=1a87b4843221d839936066c70a19adc694de550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:1d:65:70:07:5f:7f:8b:95:b5:3f:c7:e8:
8a:d5:ac:bd:4b:18:71:ff:09:c1:2b:60:b0:05:b7:
ad:82:d2:7d:eb:2b:d5:e5:ea:11:76:43:68:2c:b0:
f2:3e:4d:17:b4:da:39:4d:47:7e:6e:37:b8:89:8a:
86:d3:31:35:49:cc:7c:fc:c2:38:e4:42:fd:86:90:
30:d3:56:10:6f:a5:6a:6a:ad:d7:3f:df:52:d3:89:
4e:34:96:27:41:d2:59:f2:ce:ad:00:92:87:5b:16:
50:3e:d0:33:f1:6c:80:f9:5f:23:59:33:a2:ef:af:
c3:74:b9:76:cc:96:17:32:70:1d:ce:61:44:16:01:
0e:c0:4f:f7:cd:27:80:2a:1b:4d:cf:f3:b6:48:77:
d3:d2:a3:e2:23:e6:6c:3e:3f:87:ab:71:93:64:94:
fb:7c:df:fd:a9:72:a4:00:05:9d:e4:dd:3e:f2:f2:
9b:c9:77:c2:00:ab:84:47:c4:9f:13:5b:88:ac:e8:
74:38:a4:7d:70:29:d0:2f:43:6a:e1:e7:bd:f7:25:
39:16:7f:b1:e2:57:f0:07:e7:4f:ee:d4:5b:c5:58:
25:ce:2f:1a:e8:18:85:45:54:dd:a6:29:6a:3a:1e:
5f:77:83:61:44:4a:4f:28:2f:d8:a6:c9:83:45:a0:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:87:B4:84:32:21:D8:39:93:60:66:C7:0A:19:AD:C6:94:DE:55:0B
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:c1:4b:f3:e6:39:e8:b7:e5:fd:75:a2:9e:0f:09:06:bb:
1d:cb:84:7b:4f:7b:7b:5d:50:5d:31:ce:49:40:5c:58:77:c2:
15:41:5d:e9:09:d8:c5:69:9c:3b:ed:43:e0:99:db:2b:ec:f9:
2f:44:30:a8:77:e0:83:33:36:51:77:4d:5a:1c:0e:65:11:21:
ac:a6:9e:41:6d:b2:38:ff:df:94:cc:3e:7b:74:94:7d:79:e9:
84:e1:53:31:04:36:c9:d8:19:14:b2:2c:e6:87:1c:17:92:15:
b3:ef:43:20:ca:5c:50:44:ee:d6:0d:de:99:9d:43:0c:1f:e5:
bf:a2:20:40:49:9c:67:2d:c4:57:49:19:b8:17:1e:50:66:3f:
84:39:d0:d2:8a:69:18:85:ef:40:78:3e:52:00:67:88:0b:54:
73:a1:64:8d:08:fe:8e:36:2c:7e:23:b1:1c:43:4e:28:9a:8f:
6d:dc:b7:a1:2a:5c:8a:a5:19:51:d1:4e:76:60:8e:f3:41:26:
90:c2:12:51:93:81:75:7a:f8:ab:8d:79:ae:35:57:7e:fc:81:
44:36:5d:4a:12:15:fa:59:bb:a6:0e:1f:6f:9d:9c:10:26:eb:
05:3d:c4:62:72:46:2a:06:c5:ae:1b:fb:bf:6c:8a:5d:55:0a:
cf:9f:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:40:33 2025 by rpki-client