Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: g6Jq1jtY3iIpjDlWoQbhohCggbdUSLMU4ATDBD8aPts=
Subject key identifier: 10:5D:ED:52:12:AC:E4:59:2D:D1:D0:AD:D8:48:89:72:A4:6D:74:9C
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 0197B77CAAD34B6F91587E561E148974AA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 1097
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: 4+owUT89lUOgY64G+Hp31Ar0H1VYEhMxuJCPKftR2Eg=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:aa:d3:4b:6f:91:58:7e:56:1e:14:89:74:aa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=105ded5212ace4592dd1d0add8488972a46d749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:b4:ae:73:5b:de:3d:c5:5d:e3:58:bf:01:
fc:1c:8d:c1:33:07:5d:e6:02:9b:df:70:d4:1e:82:
f9:7c:44:a7:87:53:ac:7e:b3:aa:57:67:22:60:d8:
47:f1:97:79:96:f2:a3:a7:44:76:a0:06:72:57:6e:
07:b6:e4:1f:4c:13:44:bc:35:c4:bb:fa:59:5b:ed:
ab:e4:97:96:8b:fc:f2:11:d9:7c:91:68:86:72:ce:
86:e1:ee:ee:2d:0c:15:8a:0c:22:9e:1e:01:4a:aa:
44:51:40:cf:e2:93:ac:69:f8:32:0f:89:8f:dd:ff:
3e:5b:0a:1e:14:e1:2d:32:67:ae:f6:40:09:d0:97:
a5:01:c7:c4:7c:80:7d:77:08:fc:04:07:28:9a:7d:
10:c6:ce:14:a9:84:be:3f:63:59:2e:7f:b4:52:d5:
ba:a2:c0:52:69:98:eb:a0:d0:4f:a8:8e:55:4d:5a:
75:48:00:6a:3c:79:ce:59:7e:bd:bb:7c:70:f7:20:
84:41:28:b8:33:12:fe:99:92:ac:c0:68:15:2e:85:
2a:70:60:0e:90:e9:bb:c9:e3:18:8c:29:d3:d0:26:
e4:b7:20:ac:6b:7c:8f:8e:03:d6:de:80:6e:29:73:
cf:05:e7:72:15:42:1a:77:9b:99:25:82:ac:60:0a:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:ED:52:12:AC:E4:59:2D:D1:D0:AD:D8:48:89:72:A4:6D:74:9C
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:d6:ba:45:af:bc:a1:64:23:ff:b6:47:0c:ea:84:5e:f8:
ba:17:d2:39:0e:80:68:cc:aa:5c:7e:04:d5:5b:37:26:c1:82:
ba:e2:4e:68:4d:70:cd:32:70:e0:49:1e:1b:1b:30:b4:f7:39:
37:a5:d4:e9:85:e0:36:fc:09:e5:87:71:22:d2:23:92:c8:dd:
4d:99:9b:80:2c:41:b7:f6:93:48:1e:a9:82:54:06:fb:9b:d2:
35:4d:34:47:7e:01:b9:08:f3:8b:96:0a:a7:2f:7f:3e:d9:9e:
e4:33:ad:22:ec:67:54:c7:c9:30:ee:da:12:df:49:eb:c3:fb:
84:b5:1a:ee:0e:24:c2:fb:4f:34:7a:95:37:cd:29:54:28:af:
83:32:65:45:f7:79:23:5c:4a:9d:a2:41:1b:9e:97:1c:19:6f:
b7:36:fd:52:bd:f7:0a:e7:7a:db:b7:b1:62:82:e7:f1:29:04:
42:12:8c:26:33:0c:3a:65:b4:c7:8a:1c:6c:4d:d5:f6:0c:7a:
00:30:b3:a6:82:ad:18:0a:bd:da:6d:fb:5e:6c:a4:a8:2d:26:
b5:1b:50:61:00:ae:50:47:6d:37:fb:dc:d5:15:a1:4a:63:35:
00:48:be:46:fc:a5:be:6a:dc:c7:7c:06:9f:10:11:75:97:45:
3c:62:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client