Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: efpDZfKQIUbph99NkIOEt1TKZ29hveeyINxdTu68ghY=
Subject key identifier: 3A:22:33:2E:F2:81:A2:F6:71:6A:6B:58:9F:89:DD:D1:54:6E:2D:C0
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 0197B6D755736571592291603656C62A4596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: gwXbAtsKn7naNPvE1N+YHeRE6xaxI5YR4z/37Ochb6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:55:73:65:71:59:22:91:60:36:56:c6:2a:45:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=3a22332ef281a2f6716a6b589f89ddd1546e2dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:f1:ef:4b:d2:9e:57:61:7d:99:91:30:f9:
f0:9b:cd:71:5e:92:03:54:ab:a3:d0:51:51:83:ee:
84:f3:79:4e:03:56:4a:88:fa:8b:c6:6f:b6:cd:1f:
8e:54:8b:6c:ed:cd:93:22:0f:31:4e:ae:21:1f:e4:
03:43:08:9d:f5:98:32:e5:8d:d8:28:a4:6b:f7:41:
f3:78:62:66:d1:e5:e0:a8:5d:68:18:25:8f:e8:e0:
e5:b6:40:a9:0b:ef:62:4b:26:4d:3d:d1:e2:65:e6:
4a:82:6d:26:31:dd:4f:74:a3:4a:ea:da:a3:ae:7b:
47:a1:4d:5a:30:e2:b5:e8:d2:25:35:f6:ad:31:a2:
29:1f:8c:7d:23:39:38:0d:b9:b6:6c:45:20:27:77:
cd:da:a5:5a:ce:8b:be:fd:7a:c3:16:cd:bd:e5:58:
43:bf:2c:75:74:3d:89:fc:43:79:1f:b6:ea:f2:64:
7f:29:d6:4c:1c:81:88:8a:63:1d:ba:8e:5a:02:4a:
9e:73:cc:19:26:ef:5a:8c:7e:af:91:99:fc:c6:65:
3f:f9:c6:43:d0:af:da:6e:a5:8e:2a:e6:ce:62:fb:
ef:ec:c4:51:f1:1b:8a:53:49:9b:08:6b:8f:db:30:
94:7a:50:6c:65:f7:21:1f:46:c6:dd:49:e1:84:ff:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:33:2E:F2:81:A2:F6:71:6A:6B:58:9F:89:DD:D1:54:6E:2D:C0
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7d:ad:37:f4:dc:95:94:29:28:4c:15:cd:c0:c1:5e:20:79:
18:33:0d:7f:40:f1:98:a2:43:04:1d:3f:b7:60:ee:75:32:52:
51:4b:ed:33:04:3a:e2:ef:1d:0c:70:9d:ad:0b:1c:e9:93:34:
a3:48:09:79:42:58:74:ac:0f:70:ae:7c:c0:16:46:c2:9f:f8:
7c:70:e6:d0:36:bf:c5:39:c0:61:85:8c:3b:62:8f:99:ca:69:
2d:15:09:43:c7:a9:ad:d6:66:e5:f6:ba:ac:83:ae:52:24:18:
1a:e7:90:ce:2d:24:54:ff:7e:1e:31:c9:c0:df:7a:7a:d2:06:
34:3d:fc:18:eb:ef:19:47:bb:2f:a3:39:72:8e:04:85:eb:39:
5d:90:27:32:b5:a4:fc:66:ba:ef:35:f9:75:ed:0b:b6:d9:6e:
af:6f:fa:2c:a9:1c:a7:df:4f:0a:9e:cb:12:e6:25:a6:db:bf:
d0:ae:ef:3a:41:67:14:09:36:80:90:da:65:9e:73:ac:8e:5c:
9b:c3:58:bf:cf:d5:e6:46:6e:9a:fe:cd:d1:76:2e:ff:68:54:
02:71:8b:8a:0c:d7:29:7f:b7:94:ed:ae:24:6e:dd:4d:90:18:
ed:b6:b3:ac:9a:64:b0:9f:f2:06:bc:e6:97:09:31:3b:38:69:
0a:87:d6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:16 2025 by rpki-client