Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: NItZS9F5qPtjSM6asdM1knhygi9luLr9cyUPKxbyotI=
Subject key identifier: A2:5D:84:45:C7:0F:31:86:31:4E:A1:92:35:12:E7:F2:97:A1:09:DB
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 0197B88FB09C6321AE7969E4E097527C8EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:01:53 +0000
Manifest this update: Sat 28 Jun 2025 22:01:53 +0000
Manifest next update: Sun 29 Jun 2025 22:01:53 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: Q3XhgG00JqBg6FyByd2YSg3h+oHepeuTzu+fgLk/nMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b0:9c:63:21:ae:79:69:e4:e0:97:52:7c:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Jun 28 22:01:53 2025 GMT
Not After : Jun 29 22:01:53 2025 GMT
Subject: CN=a25d8445c70f3186314ea1923512e7f297a109db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:45:79:70:75:1a:69:9a:f6:48:fd:0b:ca:
62:a0:b3:f2:83:52:88:f4:2f:47:64:18:0d:22:91:
03:c9:a4:ee:f1:1f:10:de:48:46:0c:3f:a8:39:8f:
d5:30:2e:ba:d2:c7:da:d7:e0:23:84:9d:77:c1:c5:
30:66:0c:95:b5:fa:85:3c:06:cc:f1:50:87:61:fd:
34:20:e2:dd:81:9a:01:11:3e:83:15:a7:74:53:d5:
a7:60:47:e4:9d:e2:8e:28:2f:0e:d8:0e:2b:3a:c8:
6c:88:f5:8e:a8:5b:52:ab:d8:97:04:61:ac:23:c1:
24:48:71:96:e0:b0:f0:52:3f:99:1b:7f:fb:19:bb:
96:2c:e9:6d:45:1b:0a:d1:f5:80:77:8c:10:e4:59:
a9:3e:12:fa:16:e6:e6:fd:bd:1a:fd:a8:98:89:e3:
49:17:28:26:e7:3d:e8:59:fd:7a:b5:a0:d3:02:6b:
23:85:7d:a9:58:d5:54:99:6b:94:d6:d3:89:4f:c5:
9d:b8:86:d3:95:e7:8f:5f:07:1e:83:1e:79:ff:7a:
e2:89:f0:ef:c9:8d:cd:ab:4b:3c:0e:62:50:62:6e:
15:25:82:18:d7:c5:70:15:b6:90:2f:4e:4d:8d:f5:
40:97:09:e6:24:f2:59:7b:b6:c6:41:f8:32:16:01:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:84:45:C7:0F:31:86:31:4E:A1:92:35:12:E7:F2:97:A1:09:DB
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cb:03:65:68:98:3e:55:4e:57:20:91:e0:dc:6a:7f:99:45:
14:b4:5f:9a:eb:fa:98:8b:80:fb:11:8e:cd:76:93:11:f2:34:
99:31:50:9d:f6:42:37:37:17:20:7f:1d:e8:55:15:0b:e5:0d:
6f:61:0c:04:9e:17:8c:b8:e2:3f:1b:cc:71:fe:2d:30:48:17:
03:a7:8f:01:da:e1:e7:13:76:00:29:a5:16:62:8d:f0:cf:84:
14:ab:2c:87:50:fd:55:86:92:0c:1c:62:cb:04:84:86:58:80:
de:1a:02:65:97:70:ab:15:cf:c9:d0:7c:92:ce:f5:77:37:05:
c9:78:fe:96:83:3c:ed:7f:37:fd:ee:82:5c:14:1f:73:55:b7:
f1:57:ef:c8:61:a8:9c:02:3b:7b:8b:d9:35:e0:e3:a7:90:52:
5d:84:11:71:3b:a7:71:db:4d:6d:04:5e:13:9c:44:49:6b:2e:
f5:cf:00:4b:83:87:9c:23:b8:ca:0b:f7:f0:36:cf:8c:45:c2:
54:05:ab:b8:63:20:bd:77:9e:7e:82:c1:24:bf:04:b2:44:c2:
06:08:cc:fa:44:28:5d:5b:4a:80:49:83:1d:8b:32:43:5d:01:
37:bf:16:bd:0d:68:2e:dc:12:dd:f4:b3:2d:54:0e:6f:f5:d2:
6c:b7:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:05 2025 by rpki-client