Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: w7EShJu5Uoa9VtfFL2PErXNmcJturWQMleH501Q2zFo=
Subject key identifier: 7E:71:79:1B:A5:39:AE:B6:49:0F:9E:21:5E:8C:9D:DC:F5:8A:F2:84
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 0197BA7DBDC022BFC05DF78585240BBCEFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 12EA
Signing time: Sun 29 Jun 2025 07:01:32 +0000
Manifest this update: Sun 29 Jun 2025 07:01:32 +0000
Manifest next update: Mon 30 Jun 2025 07:01:32 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: 314d8NK/dZbCrqjAyTeYwKgILQq5WJoACj0H3YxxTtg=)
2: dc8PgnhayzDZSzqf3yg7QDbNGi8.roa (hash: J+tA+61lQEEvu8m1aPgIRjodULbBtcVS6a22ypCO1hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:bd:c0:22:bf:c0:5d:f7:85:85:24:0b:bc:ef:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Jun 29 07:01:32 2025 GMT
Not After : Jun 30 07:01:32 2025 GMT
Subject: CN=7e71791ba539aeb6490f9e215e8c9ddcf58af284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:af:50:8c:4e:1a:c8:46:21:c7:08:6b:50:
75:c7:e3:d1:13:f2:91:8a:25:fb:dd:d4:a2:50:2e:
9e:4b:5b:be:b9:07:1a:1c:6a:a9:48:84:a4:c2:3d:
db:8f:7c:bc:d4:5c:a1:ea:c1:9a:88:d4:bd:0e:d1:
a3:ce:72:a5:9c:4f:b4:d0:4f:e2:90:f6:a8:3f:eb:
5c:5b:93:4d:67:21:f5:72:44:5e:46:19:54:ac:43:
99:45:97:ee:0a:51:ce:a9:e9:b9:9a:0b:54:b8:25:
10:4d:36:84:c3:55:aa:6b:c4:d6:a7:5a:f0:80:f1:
68:5e:0f:42:99:b6:0a:5f:cf:09:ff:9d:7a:9b:d5:
6d:4a:62:10:6f:bc:67:24:10:87:49:19:c9:89:c5:
41:a2:a4:83:f1:d6:15:3f:0d:61:93:2e:bc:b6:c6:
69:80:d6:1b:df:cf:9a:75:b2:22:c6:15:a4:c4:5a:
b2:5a:33:b1:b4:74:3f:d0:e4:eb:22:aa:86:6b:d6:
9c:5d:a2:77:9b:2e:d7:b3:9e:4c:a0:ba:ff:56:15:
d7:f7:c6:c5:3c:fb:ca:bc:e5:7a:c5:33:f8:ab:73:
9f:91:44:49:93:ca:23:ad:1f:9f:81:03:6c:92:f2:
41:c1:40:9f:21:e3:c6:fa:bd:7d:17:d5:67:d8:8a:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:79:1B:A5:39:AE:B6:49:0F:9E:21:5E:8C:9D:DC:F5:8A:F2:84
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6d:61:ed:4d:13:b9:ec:76:ca:e8:26:27:38:be:38:0c:c6:
38:57:3d:e9:2e:ed:24:f1:58:8f:e0:aa:ff:8f:d3:98:bb:c6:
2d:7c:68:de:c2:ed:0a:a7:3a:71:c8:1c:64:4f:a0:d0:86:50:
c1:4f:03:d7:58:1f:f6:b0:00:9c:a9:e2:8b:30:e5:2c:45:31:
d0:93:1b:41:f7:aa:53:ec:82:55:52:df:54:89:4f:18:ed:47:
0f:64:18:eb:34:b7:bd:41:01:3a:78:43:1b:c9:02:30:a6:33:
00:c8:c1:c0:f5:06:24:8e:9b:df:3b:20:89:eb:dc:d4:e0:32:
07:5c:90:75:12:6b:42:5c:16:dd:44:23:9f:0d:4f:6b:d4:c4:
87:31:1a:cd:52:b4:8c:85:15:75:6e:1d:ab:f6:a3:ad:17:1d:
ed:a6:8d:39:80:27:20:d4:02:3c:55:da:6b:eb:8c:c3:e3:f3:
62:87:c7:8d:ea:e8:e1:90:c0:f3:75:40:8a:21:32:9e:f3:a9:
23:ee:98:db:00:44:75:bf:ef:5d:5b:fe:56:45:1a:13:14:95:
89:7f:8f:93:43:5f:a0:25:2e:32:0b:d4:8c:ca:88:1b:2d:d8:
9d:60:f0:98:40:f8:28:2a:e4:da:be:76:84:b8:98:9c:45:38:
28:06:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:18 2025 by rpki-client