
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier: 9NDYZbmiY1g8ziby2WPehUKJ2atLCMOl+9gAZerasOc=
Subject key identifier: 3D:4A:13:6D:17:88:B9:8D:68:30:CD:8B:73:75:88:49:AF:8E:41:40
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial: 0197B6D7C08EFC513899349A1D5168071423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number: 148A
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: jvHoX+MWyjRLXg1L/UTGEev6tNwtK/R7cDJma1LMfDQ=)
2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:8e:fc:51:38:99:34:9a:1d:51:68:07:14:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=3d4a136d1788b98d6830cd8b73758849af8e4140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:f8:88:eb:3b:5f:b8:6c:1b:ef:5a:35:92:
8d:87:8a:52:79:81:79:de:5e:ee:d6:28:c5:a3:d0:
be:79:f0:57:bd:29:d1:42:02:91:76:68:09:82:89:
3b:99:36:f7:68:a3:ff:dd:d0:8d:11:9a:b6:19:c1:
2f:b4:40:8b:69:61:94:0a:49:30:9c:ae:b4:f9:69:
0a:58:d6:3e:9d:5e:0f:fd:f8:6b:55:1b:b0:9c:93:
5d:a1:6e:3b:5b:d1:16:a7:c2:6a:72:be:ec:f4:37:
58:f9:2f:50:fe:6b:35:73:f2:ae:40:65:8f:0f:10:
f4:cb:a9:aa:5a:ab:71:29:10:c3:48:fc:e4:fc:50:
a5:48:a1:20:62:98:af:f2:c0:80:b2:87:6c:5d:3f:
23:87:f9:fc:b9:b7:e6:f8:b0:1a:a6:6f:6e:60:17:
98:c9:18:09:1f:ea:90:a0:3c:57:5f:d8:70:b0:c0:
83:e4:33:a4:91:b0:4c:6c:c0:95:3e:5f:80:52:aa:
cc:d1:29:8b:15:cf:bd:6f:65:01:22:5a:69:80:98:
93:8d:ad:8d:ac:e3:79:49:56:1e:07:1a:66:be:f4:
57:19:78:0e:90:a4:42:1d:9d:82:9f:48:5d:9a:3c:
1d:cd:96:8c:4b:ca:61:f0:2b:59:82:b3:af:f2:b4:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:13:6D:17:88:B9:8D:68:30:CD:8B:73:75:88:49:AF:8E:41:40
X509v3 Authority Key Identifier:
keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:62:a5:c0:36:2b:bb:d2:e8:40:ab:0b:d4:b1:de:9f:0a:
5a:03:52:8e:b1:e3:11:3a:e3:5a:b6:45:21:44:d6:a8:5c:6b:
59:36:e2:ee:0b:52:a3:b3:5b:68:5f:5d:c6:55:9b:4a:5a:91:
af:00:d1:21:b9:34:c8:3b:4e:8f:dc:3b:d9:de:59:d4:60:2c:
ca:1b:07:93:df:9f:fa:30:3d:5a:e5:88:ed:f7:c9:7b:71:49:
ec:dd:92:8a:29:15:3e:c4:a3:57:82:d1:98:7e:8d:75:a1:12:
de:28:3e:87:c9:b1:55:6b:8d:91:96:1d:d0:5b:08:f9:25:79:
b4:76:6d:9a:2a:92:e1:13:df:c9:9f:f6:f5:af:7c:32:14:66:
15:47:80:73:5d:df:d8:39:37:d7:87:5c:d5:48:a8:42:e1:0c:
c9:b9:3f:db:1f:d7:49:96:4d:b7:38:23:76:5b:41:37:b8:6d:
01:f9:78:96:2f:39:a0:66:99:37:5e:97:a9:74:c1:51:b9:eb:
c3:4b:66:5f:e2:c8:26:c2:24:96:b2:0b:88:8c:b8:16:36:b6:
3b:b9:6d:74:bd:6b:ef:e0:05:89:17:19:c2:b0:43:45:72:9d:
93:87:e1:f8:0c:14:28:df:f1:ff:bc:38:af:d2:e1:35:d4:77:
72:ff:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:33 2025 by rpki-client