Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: bQiUynh80D6VKvWjtzfVxtjkB3y1PsfF3rVzLyapEyQ=
Subject key identifier: 06:F5:3B:5E:FB:4B:1D:C8:EA:0C:07:60:AE:DA:9F:1A:27:E5:03:37
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 019769609716F566803E3F768ACB9E9CFBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 13:00:27 +0000
Manifest this update: Fri 13 Jun 2025 13:00:27 +0000
Manifest next update: Sat 14 Jun 2025 13:00:27 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: iNZUXlyUNi3Krk4BmACIsX+n6weXiwzOxuK0dAz6I0w=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:97:16:f5:66:80:3e:3f:76:8a:cb:9e:9c:fb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Jun 13 13:00:27 2025 GMT
Not After : Jun 14 13:00:27 2025 GMT
Subject: CN=06f53b5efb4b1dc8ea0c0760aeda9f1a27e50337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:be:e4:01:d4:c1:6b:f6:7c:4d:a8:90:a6:
f1:68:a8:fe:5f:1a:1c:2f:28:26:b9:13:26:92:a7:
39:b5:e6:3c:86:04:4c:a9:73:3d:3a:97:c8:31:ba:
65:30:23:13:79:f0:fa:83:ba:9b:02:c8:b6:69:e7:
a9:7e:2e:68:45:2b:4a:c7:65:d0:f0:ef:cd:94:23:
e1:5c:bc:5e:49:2f:42:9f:90:d1:63:de:a5:d1:a1:
7f:38:77:fb:95:20:2f:67:fc:20:be:82:fc:5d:ec:
52:58:5f:62:ef:3f:aa:2c:93:29:b9:51:cf:b4:a7:
84:37:4a:ab:e6:c2:a2:ea:bb:76:65:cf:c7:96:45:
7d:9c:4a:4b:16:e1:05:d1:5c:22:7d:0a:00:bc:4a:
d7:df:36:d1:66:c9:f3:79:f0:47:82:82:31:ff:74:
a8:eb:0e:6c:47:9e:60:b7:ce:1d:b1:b6:87:9a:1a:
f5:c9:8a:d1:d3:18:c8:5a:83:17:0b:f9:ac:94:93:
5a:d5:fc:60:47:10:76:b0:3c:7a:01:64:7f:e4:cf:
7a:f7:24:59:03:a1:5a:d6:46:4b:1d:f0:31:c1:94:
1f:a4:09:e2:41:50:6c:5f:d3:7d:d6:03:10:dd:16:
f0:48:50:ee:c1:75:9f:e1:42:f6:2b:07:ee:76:45:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:3B:5E:FB:4B:1D:C8:EA:0C:07:60:AE:DA:9F:1A:27:E5:03:37
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:11:cb:a7:94:dd:b5:17:cf:52:95:c2:ec:27:fd:1c:c9:5e:
89:e8:0c:90:d2:a6:f0:f3:77:1d:de:d4:14:52:94:71:bf:53:
c3:e3:b2:d9:b9:68:2d:cb:9f:34:7d:b5:a6:6f:5f:ef:a6:3d:
ef:06:30:54:9b:aa:f8:68:63:27:99:34:ec:02:fc:ec:60:7f:
b6:b1:0d:ba:02:e1:b4:30:0e:34:b4:53:cc:b1:cd:08:12:b7:
e8:f7:23:c7:72:4e:21:d7:d7:b5:a6:95:33:88:d3:5f:6c:3b:
97:23:d5:98:2c:8b:43:fe:ee:d0:45:db:62:cf:33:34:ae:aa:
d7:42:f2:2b:bb:f9:53:7a:32:5c:89:44:b5:4b:54:77:1f:f4:
f1:18:91:39:91:7d:b7:11:c5:20:c4:50:32:03:db:ba:bd:42:
28:03:f9:ca:e7:c2:c1:61:99:6d:86:a7:be:1e:e4:1b:99:3c:
8c:ed:5d:af:ae:3b:e8:f2:dd:2d:45:3a:3c:5b:ec:c9:de:bb:
e6:87:0d:9a:75:72:7f:b0:25:bb:7b:fb:7f:d4:fe:f6:be:17:
9a:78:09:ea:a0:69:42:40:55:f0:aa:3c:76:d5:63:bb:13:24:
75:9d:71:56:2e:38:ee:98:1e:29:07:3a:a5:77:ba:0b:c1:ed:
e6:4b:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:02 2025 by rpki-client