Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: /9P4UWNWh9zEWflebs5sd0IXsnxWQmrlCD1tvgWbtFE=
Subject key identifier: 05:2C:54:C6:09:98:72:59:5C:27:32:F7:89:2C:3F:EA:87:5F:A0:41
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 01976B864DEB65132BD8D3D71A8EE1002FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 151B
Signing time: Fri 13 Jun 2025 23:00:53 +0000
Manifest this update: Fri 13 Jun 2025 23:00:53 +0000
Manifest next update: Sat 14 Jun 2025 23:00:53 +0000
Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: TXWLkuA2PIQAEWCEs1zXQgTF3BKVrwqdABoAUa1ffU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:4d:eb:65:13:2b:d8:d3:d7:1a:8e:e1:00:2f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Jun 13 23:00:53 2025 GMT
Not After : Jun 14 23:00:53 2025 GMT
Subject: CN=052c54c6099872595c2732f7892c3fea875fa041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:a6:7d:7f:9f:d7:34:02:5a:5e:23:6c:b4:
20:10:93:43:b7:5c:fd:9a:c4:44:98:7f:7b:9a:3a:
2c:44:27:9d:74:5a:89:ac:7a:50:6e:cb:25:26:e2:
88:70:1d:6f:8b:18:61:28:a4:ca:e3:20:2b:a9:28:
cd:e8:5f:75:cf:87:8e:1f:db:86:6b:bc:5b:a0:1d:
c3:be:64:86:c3:dc:bc:ae:b5:d2:a7:48:8c:25:57:
39:73:e8:62:12:64:e3:cf:27:51:97:e9:93:c9:d6:
6b:44:ff:e3:4e:f4:2c:c5:90:84:b9:64:80:a6:82:
6c:19:67:d9:d3:44:48:fd:73:60:f7:24:24:db:a7:
9f:72:ae:c7:ff:3e:09:89:e7:3a:be:59:d7:7f:90:
67:b3:5f:6b:7e:73:3a:8c:b7:ef:54:9b:59:c8:e7:
fe:04:d2:85:42:d8:b3:0d:7e:c8:3f:77:d6:5f:24:
3d:ed:75:44:62:83:e7:8b:b9:83:79:4c:b8:3c:3c:
dc:e9:2c:1d:3d:b4:89:3e:9a:78:e5:d9:29:8b:1c:
d8:47:b8:9b:29:05:5e:7f:5f:7d:12:f9:1e:fa:c4:
f9:94:1a:4c:9d:86:12:08:de:a9:eb:24:43:5c:6b:
15:97:d3:ae:e0:31:b9:14:57:4e:9f:af:09:6c:83:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:54:C6:09:98:72:59:5C:27:32:F7:89:2C:3F:EA:87:5F:A0:41
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:f9:ed:6e:2f:0d:b8:e8:aa:eb:a2:df:4b:2c:f1:86:b2:
dc:a6:d4:05:a5:78:4e:fa:ec:8a:41:3c:ee:c1:fa:0e:4c:4e:
51:c4:f7:15:a7:b4:49:98:44:20:50:38:7f:6d:bf:14:e1:4b:
22:33:5b:0e:da:39:24:ac:1b:0e:ad:71:88:eb:19:65:31:46:
52:aa:15:92:f8:ad:6e:85:60:af:2a:30:34:0c:4b:5b:7d:0c:
cb:e0:be:db:5d:d4:e8:54:01:c7:f0:cd:d5:56:6a:1d:b6:1c:
8c:ac:46:f4:6f:4f:ad:ab:be:0d:c7:8c:7e:87:93:42:18:1f:
1c:99:96:5a:44:e9:76:e3:13:d8:26:bc:80:75:3d:ea:f2:c6:
95:21:3a:ef:fb:4e:61:e2:e9:64:a7:40:3a:94:e3:e7:44:e0:
55:a9:0b:17:75:d4:5a:e0:21:a6:26:aa:c9:b2:1f:9c:4c:25:
39:71:13:ae:bc:2e:38:d9:58:d4:72:04:3c:6d:15:4d:e3:dc:
06:90:ad:c6:78:0b:d6:e8:93:0f:6e:0c:24:3c:85:8e:11:22:
e0:93:64:1f:5d:f8:a7:c5:7a:ed:62:c3:6b:1d:94:06:ac:d0:
bc:02:a6:54:10:90:6b:ee:c8:d1:4a:4c:11:7d:8f:79:57:59:
8d:7a:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:52 2025 by rpki-client