Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: sPv+gsrB2RlIIM5pSsHN0flsxAHkygY99kJ2BVyIwBM=
Subject key identifier: 61:5E:6B:CA:54:1C:9D:44:2C:4B:A5:27:72:4A:5D:2E:87:63:66:82
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 0197B7B361A2ED7725AC9D9E1029D837DB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 1303
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: 4mP7fK0d4BGy2+JuTY3DH8Ky7tfZYaSHkHSM6KJp8DE=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:61:a2:ed:77:25:ac:9d:9e:10:29:d8:37:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=615e6bca541c9d442c4ba527724a5d2e87636682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:e6:fc:92:a8:2a:85:f3:2c:ea:43:e8:ac:
d0:d1:88:e3:3b:8f:de:e0:3c:6f:88:56:1e:63:54:
71:82:63:de:f9:30:f9:60:c1:71:32:a2:11:49:27:
11:7a:64:48:0a:49:6e:a4:a3:7f:73:0c:b2:60:28:
ab:92:e3:91:bd:fd:cb:7a:76:a2:fa:8a:a8:83:72:
53:a0:34:b7:90:a1:e7:83:5e:df:72:88:c4:9c:70:
20:d5:27:00:9b:a4:a1:e9:72:64:c3:4c:9a:26:6b:
fb:6c:bb:e7:a2:8b:af:94:13:39:f0:d7:ac:13:bf:
f8:5d:31:c9:3d:79:29:c8:63:c3:95:95:0c:6c:d2:
64:5c:e2:6f:41:dd:5a:8d:a3:e4:c5:68:d0:7c:4a:
43:05:66:68:01:4e:bb:d3:f4:36:00:76:94:e7:38:
34:6b:de:b0:6c:8d:8c:b1:0a:61:54:04:0c:43:b7:
06:45:71:cb:c5:2b:d3:7a:e7:95:d0:ee:06:8d:c0:
52:8b:14:c2:bd:eb:ee:c6:16:e9:e1:e3:e6:6b:c4:
f6:9e:be:a7:8a:da:ff:79:d8:e5:1b:a4:6d:af:31:
3d:02:0d:79:6f:81:e3:b3:bf:42:e6:72:71:ec:bb:
9e:91:ce:95:e9:09:b5:0d:7b:c4:d5:a5:03:20:b2:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:6B:CA:54:1C:9D:44:2C:4B:A5:27:72:4A:5D:2E:87:63:66:82
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ac:0e:1b:91:e1:76:03:c9:de:ec:b8:3f:51:aa:27:0b:c5:
ad:5b:3a:cf:d0:82:4a:b9:7d:a7:52:b3:67:b2:fd:80:25:25:
cd:22:b0:08:e5:cf:30:49:ea:c8:5f:72:8e:99:73:c6:96:83:
54:b4:3b:06:c0:9e:1f:38:49:8c:45:e5:30:10:a4:e6:5d:6c:
e4:ec:ce:34:0e:0c:e4:ee:d7:a1:57:46:94:c9:f7:5b:11:85:
77:ec:89:ee:52:bb:42:ea:4b:cd:30:6a:43:60:65:43:b4:98:
96:2a:81:fd:2c:a2:5b:96:79:2e:bd:0e:5c:44:2b:59:d6:9b:
3e:3d:25:e8:58:65:09:d7:f6:ef:7c:69:68:d1:60:76:ec:ed:
27:fc:99:43:37:0b:ff:9d:3e:51:22:f8:42:58:8e:da:ce:b2:
24:bf:c2:02:ad:dd:4c:01:f7:9a:09:0f:f7:04:29:a9:78:32:
ff:8a:5f:64:b7:4a:4d:fe:ec:82:b4:48:a9:e7:ef:34:4b:88:
ce:a5:80:c3:91:db:55:4f:65:0a:76:0b:ee:4e:65:00:88:75:
06:09:c2:97:57:d6:d6:cf:15:80:ff:8a:a9:36:22:d2:2b:f2:
92:84:33:6f:d8:18:75:e3:84:81:de:37:34:1e:4a:ff:5e:67:
8e:a1:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:10 2025 by rpki-client