Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: 1rJe0pbCM00CCAoLNS4JPUz+VFdztDyZUAP2Iv/YPW4=
Subject key identifier: B4:B1:D3:DC:CE:5C:90:54:2F:63:A7:29:C3:CD:A3:C6:9F:00:45:81
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0197B821228D830DE0B92E3E6E724D7683A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0EAC
Signing time: Sat 28 Jun 2025 20:01:08 +0000
Manifest this update: Sat 28 Jun 2025 20:01:08 +0000
Manifest next update: Sun 29 Jun 2025 20:01:08 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 2MY16zrqd8g20/a3O7g57v4hjhS5EM45nm2DKiAt/68=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:22:8d:83:0d:e0:b9:2e:3e:6e:72:4d:76:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Jun 28 20:01:08 2025 GMT
Not After : Jun 29 20:01:08 2025 GMT
Subject: CN=b4b1d3dcce5c90542f63a729c3cda3c69f004581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:b7:51:02:b3:5b:58:7e:e2:ad:fa:a3:dd:
d5:96:d2:67:23:75:f2:6d:0f:ed:5e:07:91:47:ce:
e2:fd:48:a6:6c:45:0e:1f:0a:56:09:c1:d4:41:26:
5d:c9:a9:10:f5:6d:b4:b8:ef:8b:c6:cb:de:f8:ba:
59:46:22:b8:91:27:f8:23:13:1d:4f:66:56:12:03:
e5:2c:2c:16:21:6f:2d:f9:b0:62:85:66:ad:50:16:
a2:2d:5c:08:aa:6f:eb:ed:73:33:2e:02:81:22:fd:
ad:15:73:92:ee:70:d7:03:7a:28:c9:55:2c:f6:21:
17:c5:f1:7e:08:be:76:0b:1f:d0:f2:2e:54:96:d0:
27:32:9f:c9:f9:32:52:e0:b0:e0:ab:a3:87:ba:c1:
bd:78:ae:44:0a:53:6a:52:7d:59:81:5b:11:9b:cf:
2b:da:0b:dc:98:c2:6c:cb:a4:54:bd:81:8c:b8:44:
51:eb:21:23:73:f0:72:46:99:fc:94:17:a7:5d:8c:
5c:03:79:4d:a3:ff:0f:b9:aa:86:41:25:80:71:1f:
24:f1:be:63:c0:7b:2c:2b:4f:11:bd:6a:f7:bd:e1:
39:b0:5e:48:3d:e6:e5:24:e2:5b:ca:11:59:97:bf:
93:15:76:49:91:54:e1:53:12:5c:c8:5f:61:d7:9a:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B1:D3:DC:CE:5C:90:54:2F:63:A7:29:C3:CD:A3:C6:9F:00:45:81
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:4d:fb:49:8a:d7:8b:94:a4:a0:1f:80:a0:b3:40:bf:f0:
1f:23:93:be:35:21:ff:a1:ae:f3:e8:06:67:f7:c9:f4:2b:81:
4d:39:b4:3f:5a:11:dc:5b:3d:44:22:34:9b:48:41:0b:2a:e1:
68:22:57:91:53:fd:a7:91:48:40:89:0b:dd:ca:3b:29:8f:40:
f1:1f:1f:49:a2:b8:3c:95:cb:08:a6:c1:65:6e:0d:52:31:0e:
f3:3b:ba:78:f5:41:0a:ef:12:27:f7:d0:83:85:40:5e:93:47:
2d:de:4a:4b:78:3e:4f:0e:bd:7b:cb:c1:33:ca:78:c7:dd:98:
8c:1d:a2:84:a2:1f:f5:41:f9:e9:b6:f3:95:39:fe:4a:0e:8f:
6e:12:6b:3e:3c:63:98:e1:33:0d:09:a9:c2:90:2b:25:82:20:
45:bb:49:59:50:7f:af:7a:54:1e:70:07:52:b7:02:d1:d7:86:
c9:95:0b:8d:dc:c6:3b:4f:69:b5:a7:cc:8c:59:51:93:45:3a:
ff:8d:dd:cf:fd:71:07:2f:6d:e6:ff:2e:42:f9:fd:40:c8:a4:
e3:d9:c7:a0:1e:47:1a:a6:8d:c0:05:fa:66:eb:0c:a6:97:f6:
89:77:40:bf:53:16:95:7e:c0:b2:ff:61:c2:40:78:e9:11:0e:
dd:ef:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:30 2025 by rpki-client