Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: wjyayi9LY53o9HWtCojBGN216Nz09T4b1YksH2CVsvY=
Subject key identifier: 5C:9B:BC:8D:84:0B:31:BA:79:16:4C:BF:60:66:6D:4C:9E:B5:0B:53
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 0198D47399AFB34FF790AB5CC7D3DF60547B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 0134
Signing time: Sat 23 Aug 2025 01:03:22 +0000
Manifest this update: Sat 23 Aug 2025 01:03:22 +0000
Manifest next update: Sun 24 Aug 2025 01:03:22 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: mUxmWMVcxR/8X1FUeHalLIMKCCraQ+Dzy+s2rhKaKM8=)
2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:99:af:b3:4f:f7:90:ab:5c:c7:d3:df:60:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Aug 23 01:03:22 2025 GMT
Not After : Aug 24 01:03:22 2025 GMT
Subject: CN=5c9bbc8d840b31ba79164cbf60666d4c9eb50b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:f7:90:fb:8d:21:80:48:82:52:30:5b:55:
6e:7b:27:da:ea:17:85:7b:fe:51:75:29:4d:06:2f:
60:30:ae:68:78:70:44:62:f3:62:f6:d4:2b:b0:c4:
5f:08:bc:63:d1:cf:79:cd:5a:93:79:52:f2:28:97:
d9:05:38:b0:2a:88:fb:e0:03:e5:c3:a7:ec:13:42:
d2:67:b9:43:e4:ce:17:4e:5b:48:12:63:96:6f:22:
90:e1:e7:a9:98:f7:73:50:37:29:c9:bf:30:fb:39:
bd:60:16:38:79:05:d0:a5:a3:b6:18:4c:68:77:bd:
57:0a:e8:41:94:70:ed:28:8b:77:64:71:88:6a:51:
33:fc:88:ae:50:76:8c:6a:22:e0:f4:0f:97:13:e9:
5f:9f:2c:18:0d:33:74:0b:ca:cf:86:dc:9c:0f:1b:
ba:63:28:75:f6:66:4d:3d:b0:d6:1e:b4:f6:93:20:
bf:e8:a0:53:15:5f:f1:2a:35:3f:17:5f:18:db:5b:
ba:56:33:53:b7:3b:38:49:04:31:93:d4:38:fd:eb:
9e:60:fd:9d:7e:43:32:19:c9:05:8b:6e:35:9b:6b:
7c:a4:77:73:79:e2:0d:d8:96:b0:09:2d:96:a4:d3:
b2:cf:67:70:28:63:d8:a5:b4:33:f7:59:31:53:eb:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:BC:8D:84:0B:31:BA:79:16:4C:BF:60:66:6D:4C:9E:B5:0B:53
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:f8:02:22:1d:c5:ff:90:5a:6e:5d:be:c1:a5:00:04:07:
50:7d:e4:76:38:87:ba:0b:da:76:b3:25:c4:8a:5f:83:b3:8a:
b0:f0:c2:9f:a0:90:0b:f0:d8:6c:66:a0:b9:14:99:3e:20:a8:
48:67:7a:dd:23:fb:23:d0:4c:2f:f4:64:42:0f:b9:eb:91:92:
a2:c6:fa:37:3c:e8:50:d1:5a:26:05:5f:8d:81:c2:db:e8:c1:
35:63:6e:67:d0:b3:02:8a:c2:8c:bb:83:98:71:62:71:9d:a2:
a0:72:de:e3:bd:50:44:9e:38:2c:73:cd:86:1c:fb:0d:20:c7:
fd:2b:78:39:f2:9d:7b:c6:fc:26:5f:f1:a6:1d:bf:1f:da:a8:
d2:38:9b:da:aa:23:42:cb:f4:7b:5c:a3:7d:55:65:23:f0:95:
dd:16:84:0a:9a:d9:10:db:15:b0:e9:6a:dc:73:92:2c:92:86:
74:3d:4f:4c:69:93:5c:07:fc:44:84:43:bd:5a:84:8e:ee:c4:
27:f2:00:f6:d3:b0:92:ba:5c:c0:c2:e6:0e:f3:e9:55:d4:14:
4b:da:c8:85:cf:28:a1:44:9c:3b:f4:56:40:47:ff:60:5d:da:
8f:bd:81:15:24:52:92:71:f9:ac:84:f0:5c:5d:55:6a:17:ce:
e6:55:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:39 2025 by rpki-client