Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: POZ8Qb/o/ekkFPLBJCCPSYZilgmgmRGNAyxqASiEtGw=
Subject key identifier: EB:86:8F:65:F7:FA:CE:EA:AA:7B:CC:E6:27:20:F0:52:A6:1A:5E:E5
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 0198D583FA45CAA81E067E3A7BC49A496EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 1397
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: nK0QeHEexlsawkQrAi/bn6aQ11VuZPdDMHuzlONJCwU=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fa:45:ca:a8:1e:06:7e:3a:7b:c4:9a:49:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=eb868f65f7faceeaaa7bcce62720f052a61a5ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:9b:7a:25:1c:9c:b9:4f:14:01:64:ed:e8:
31:70:dd:52:2b:51:fb:13:77:3c:4a:41:64:71:35:
94:47:16:02:32:81:7e:be:b7:88:3f:0e:a9:7b:20:
da:2d:6f:81:35:ab:56:82:46:2f:e5:6b:05:e0:20:
ac:ad:36:d9:23:3a:c9:6a:e5:45:90:c3:b4:c2:08:
3d:6d:c0:88:95:fd:c4:74:e8:6f:94:1f:99:8f:09:
17:44:1d:9e:28:5d:28:4b:1b:02:e3:ca:ad:de:0e:
a5:f0:7a:d9:47:a9:9c:92:fa:75:96:b7:25:50:d8:
34:35:3c:98:da:61:03:2d:0c:dc:42:b4:4a:2b:46:
a8:ab:18:c7:02:36:f1:bd:3d:19:98:a6:92:c1:22:
e6:3a:9a:52:68:5b:ce:a5:da:af:fd:ae:e6:02:7e:
2e:e9:c7:9a:82:2c:77:8b:f5:bb:2a:20:dd:95:8f:
18:ce:c8:71:31:b0:d7:1a:cc:18:15:0e:5f:31:d4:
6a:6a:1a:43:aa:f1:75:c6:8e:b0:5e:0c:0c:31:18:
a2:e7:44:a9:95:68:f5:46:a8:f7:08:2e:f3:d5:9c:
70:67:2a:a0:7e:c9:0f:1e:de:c2:c4:36:63:55:81:
7d:85:f0:e6:83:57:4b:d4:a2:ce:15:51:62:f6:bc:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:8F:65:F7:FA:CE:EA:AA:7B:CC:E6:27:20:F0:52:A6:1A:5E:E5
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:fd:00:57:a7:d5:22:dc:8f:74:51:62:c4:96:07:ef:d7:
1e:46:f4:94:6c:3d:47:d0:4b:d1:6d:20:5c:c4:b8:fe:ec:dc:
ed:28:e9:da:f7:50:6e:70:e4:3a:6d:df:48:36:a3:69:98:40:
2a:9c:00:db:53:1f:d6:64:fe:2a:a4:c2:62:1b:81:54:03:59:
0a:46:db:d1:55:86:fb:f5:2f:1e:6f:70:ef:da:66:cd:36:ea:
b3:5b:93:cd:b4:f9:4d:53:19:29:6b:a0:9a:50:ec:dc:dc:97:
95:fc:f7:a7:74:86:65:bd:23:dc:31:02:42:4c:e9:ea:c5:b5:
d9:95:6e:20:94:29:2e:0c:39:24:64:fc:c7:04:ac:c6:b2:17:
a8:c2:ef:50:fb:69:ac:47:a7:49:2e:84:bb:b9:5c:e7:19:19:
3f:30:9b:87:92:dd:e9:c9:54:de:93:cf:09:a1:93:28:e8:56:
49:ca:fa:c0:9c:9e:e8:fa:f2:74:9b:c0:3b:75:c0:29:fa:ab:
db:81:49:c0:f8:70:98:01:c0:13:3c:bc:0a:62:2d:fd:5c:92:
8a:e8:e4:0a:79:c1:15:c6:d2:4a:74:49:db:72:15:08:90:55:
11:64:22:01:59:07:ae:22:a4:e8:ca:82:e1:91:72:cb:12:8f:
58:26:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:23 2025 by rpki-client