Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: 1qiWv3pPX4na65ZZ/bacbhlswBvCehR/Zay2J8ocBPg=
Subject key identifier: 8A:68:09:7F:2A:37:C8:4F:06:18:A7:E6:C4:A0:67:06:73:94:8F:7B
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 0197B9A15F874937C81188D8020B68B3CAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 03:00:50 +0000
Manifest this update: Sun 29 Jun 2025 03:00:50 +0000
Manifest next update: Mon 30 Jun 2025 03:00:50 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: ztj66a4lfDE1bLQMbK3n4qjsUe9Rddj2nasuySElH9w=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:5f:87:49:37:c8:11:88:d8:02:0b:68:b3:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jun 29 03:00:50 2025 GMT
Not After : Jun 30 03:00:50 2025 GMT
Subject: CN=8a68097f2a37c84f0618a7e6c4a0670673948f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:72:5e:a9:5d:f8:7a:72:be:f1:8b:29:04:
fa:3b:11:f1:cf:ec:28:78:0c:3b:55:12:c2:44:36:
26:f1:20:cc:39:9e:63:c6:90:f0:79:71:72:7b:27:
43:e0:a6:de:d2:e9:c2:53:aa:e7:d0:0b:9f:7d:0c:
d7:3f:17:ff:ae:c6:33:4a:02:fe:c4:46:50:77:82:
fe:0f:de:0b:1d:c9:dd:49:16:c9:b4:73:84:f5:76:
31:cf:4c:34:8a:f5:5d:f0:4c:ec:a1:df:23:9c:5d:
e7:98:f4:aa:da:73:9e:cd:61:e5:74:3c:d4:6d:63:
18:05:a1:e6:17:95:40:2b:ce:63:e2:63:6d:a6:a6:
34:2e:30:78:a8:51:0d:6f:a2:96:63:3b:46:32:29:
91:3e:78:43:fa:3e:56:48:ba:0f:3d:39:86:5d:9b:
11:70:b8:25:5f:2f:9e:35:0e:07:16:bf:36:f8:fc:
bc:53:36:44:e7:2f:a5:1b:ae:fd:f0:f8:2c:98:70:
63:a5:e6:7b:c4:2a:64:3e:79:8d:6d:a3:81:96:42:
94:46:b4:66:63:a4:dc:7d:34:33:f5:bb:38:a2:e7:
e5:04:20:12:62:91:fe:3c:3f:2f:03:d3:bf:ee:5a:
10:8f:2e:58:90:af:72:d2:31:72:20:28:33:2b:cc:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:68:09:7F:2A:37:C8:4F:06:18:A7:E6:C4:A0:67:06:73:94:8F:7B
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:b5:32:58:69:73:d1:3f:c4:e9:60:7e:6d:79:62:d1:30:
72:b4:58:b3:8b:d1:52:0b:8f:76:f5:92:04:24:fe:e8:70:57:
61:47:a5:3b:25:5a:3a:06:c1:e4:cb:3a:74:f8:ee:29:ea:5e:
57:75:a3:c2:85:fc:02:8a:2e:37:33:fa:17:a4:d5:7a:d7:53:
0c:db:2b:dd:20:2e:4f:2f:0d:6a:41:b6:f5:9d:83:4c:ef:d4:
f7:0c:0b:15:93:a2:8f:98:7c:8f:b5:46:cf:84:6f:8a:4a:a3:
11:b0:08:45:db:6d:20:81:3b:56:5a:f8:d5:12:87:17:99:fa:
4d:6b:5d:8f:cd:23:d7:09:6b:73:93:e3:1f:5f:61:9b:f6:3e:
31:6e:47:1a:62:0a:fb:63:00:d5:ae:0a:17:fc:a8:50:a5:04:
b5:9f:84:ff:48:d7:f3:ba:43:ce:cc:b3:59:05:ce:16:e6:98:
a9:c3:93:44:d7:3d:76:52:07:c8:7d:7d:05:73:49:c0:a9:e9:
28:19:b7:24:f3:19:f6:e6:ed:cc:48:6f:0a:a1:15:7d:62:ef:
ec:c3:08:4a:6c:55:b0:a8:8e:68:0e:d4:95:d2:c0:19:ce:32:
6c:ce:66:53:99:df:8f:7d:10:09:e4:6a:6f:17:0f:24:5d:0c:
cf:b5:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:04 2025 by rpki-client