Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: pTQBjw0OztYDqatkMachwPNZ8heUN8RKxSMe+xr9JWU=
Subject key identifier: EE:15:1E:5C:81:EF:73:40:0E:DB:31:D5:D2:51:13:D9:12:38:71:78
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 0197B7EA5FDD347AB8F8A6D24EAE11C6CCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 08AB
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: AcsfWrQkq67kvtVyWWRndUYyWU2yP9Vg4DtwypAb2BA=)
2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5f:dd:34:7a:b8:f8:a6:d2:4e:ae:11:c6:cc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=ee151e5c81ef73400edb31d5d25113d912387178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:cf:51:57:bf:73:d9:3b:89:50:7e:01:e8:
cc:46:71:90:16:95:51:1b:7d:63:25:78:cc:da:45:
88:49:43:31:a2:e5:b8:c5:a2:f2:8d:05:58:20:c0:
94:f0:2e:df:bc:6f:13:a9:1f:52:5f:6b:47:27:19:
05:bb:11:75:ec:9b:cc:63:e5:56:31:fa:aa:0c:f4:
d5:32:55:e1:36:41:3f:94:0d:d2:92:fa:66:90:bb:
16:1b:f5:27:71:9f:df:f7:b3:2c:57:e9:4a:77:3a:
ce:b3:4f:f3:6d:e0:db:89:89:0e:1f:c5:3d:a6:e9:
75:22:ac:10:d4:a8:19:ff:bd:b4:25:39:76:52:89:
bf:c4:8b:77:df:e4:65:1c:74:2d:4e:f3:61:86:02:
25:ca:c5:a7:a2:20:37:cd:4a:01:b6:4b:7d:d8:27:
ec:d6:6a:8e:c6:48:a3:2b:4e:96:b8:df:00:98:2d:
49:7c:91:44:e1:c5:6d:d6:7b:35:1b:22:50:b9:ad:
e4:8d:d7:ca:a5:ef:cf:73:97:18:be:5c:46:f5:e7:
8b:de:04:99:07:fa:1c:01:92:f4:ec:36:30:62:2b:
53:f0:91:a1:cd:ab:87:bd:7c:d2:fe:df:6b:3a:ed:
24:4f:79:83:17:a3:12:ae:13:34:7d:d6:c2:68:e1:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:1E:5C:81:EF:73:40:0E:DB:31:D5:D2:51:13:D9:12:38:71:78
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:53:58:49:43:ad:47:87:3d:3c:51:06:2c:22:18:6d:03:
d8:5b:4d:f7:cf:56:b3:13:eb:88:a1:b8:84:b7:de:46:30:4f:
9e:c2:2e:56:a4:6e:0f:b5:90:9a:40:ff:21:97:3f:93:2a:eb:
75:32:e9:b0:e8:ea:cc:af:ec:df:d0:05:bb:4f:b5:23:25:11:
71:e0:56:aa:c2:2a:ce:1d:94:ca:52:2d:a5:5f:c1:70:fb:ba:
a6:52:c3:24:5a:84:88:34:14:60:e2:67:f0:a4:1d:73:aa:78:
80:7f:45:10:95:5e:97:74:be:b5:26:11:f4:6d:f0:9a:7f:ba:
d9:af:ac:7c:2f:4c:01:09:b7:af:3d:60:98:71:b7:a5:c7:68:
af:b0:e5:22:16:e9:fd:1e:4e:0a:5d:2e:bf:bd:be:dd:15:ac:
00:63:d1:d2:e7:2e:a1:19:62:82:a7:71:7d:44:c3:c2:ce:cd:
5e:fb:3d:a9:6a:d7:3f:f7:3f:12:10:8e:71:56:ad:e1:5c:8f:
71:e5:4e:0e:a4:d0:bf:34:17:eb:0d:33:0e:af:35:ca:de:25:
c1:9c:b9:b4:12:71:8e:72:43:4f:21:48:21:d5:53:36:45:2f:
d8:f2:3a:f1:d6:79:e1:0f:81:da:a3:37:51:bc:42:89:9d:cc:
54:87:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:10 2025 by rpki-client