Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: VFa0LZmN7pmDSAl3zE24B2smRiXcrCVfOng+YrJQtEk=
Subject key identifier: 78:68:E0:82:62:A8:E4:0B:B6:19:53:A5:28:E2:53:97:FD:CF:13:C9
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0197CDCD95B4E2C6A8FABA49A067A4D2790D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 01D5
Signing time: Thu 03 Jul 2025 01:01:31 +0000
Manifest this update: Thu 03 Jul 2025 01:01:31 +0000
Manifest next update: Fri 04 Jul 2025 01:01:31 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: 1iDaPS4xbR3OnjL1FfGiJpXcNDvves6hFmpag5fNBic=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:95:b4:e2:c6:a8:fa:ba:49:a0:67:a4:d2:79:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Jul 3 01:01:31 2025 GMT
Not After : Jul 4 01:01:31 2025 GMT
Subject: CN=7868e08262a8e40bb61953a528e25397fdcf13c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:41:87:0c:ef:05:39:5b:8a:e5:49:c5:71:db:
4c:91:46:7e:c8:c5:2e:ab:36:c7:bc:4b:60:b3:93:
9d:49:bc:c2:b0:db:24:d9:08:e8:7c:38:5f:f7:12:
d4:2e:5f:87:98:2c:ba:81:d5:30:08:df:0d:f9:4e:
5e:97:34:cc:57:fd:e7:6c:2f:6c:52:a9:8d:5b:de:
8e:29:89:d3:62:80:5a:37:d5:e6:57:0b:19:72:94:
b5:3f:27:75:b7:fc:cc:19:60:df:54:8c:a7:bf:6b:
1c:eb:38:0d:a0:43:10:62:33:f9:a1:41:e2:9c:af:
1e:4f:5a:27:b0:67:36:da:a8:47:86:e4:65:4b:cd:
61:1e:d8:67:7b:7b:77:db:d0:50:c3:9e:c8:df:89:
46:d8:cc:fc:d4:23:b8:be:c8:6c:6a:13:2a:b7:bc:
f2:67:13:9a:ea:bb:4d:6c:73:b7:fd:eb:38:0a:b7:
2d:43:ae:4d:7d:cd:ec:5d:90:10:fa:15:bc:77:3f:
21:5a:c9:c3:8e:66:3a:34:e7:53:1a:45:9f:8e:5b:
ad:c9:f9:3d:d5:26:6e:5c:4f:cf:e5:e0:01:16:34:
f8:30:bf:a1:d5:9c:c3:53:09:41:8b:9f:b5:e4:23:
89:bd:c7:03:38:0a:8e:15:49:b0:87:2d:35:e4:92:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:E0:82:62:A8:E4:0B:B6:19:53:A5:28:E2:53:97:FD:CF:13:C9
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b3:c9:5b:ff:2f:b9:52:27:b4:3f:1c:20:29:35:d2:ba:e4:
7f:ef:40:8c:d7:98:a6:dc:84:0b:4c:2a:5e:c4:4e:0f:93:a9:
0c:b3:3e:55:8e:16:b0:3b:aa:e3:b9:23:bc:9d:1b:15:44:0b:
d3:7f:26:d2:0b:8b:ba:06:40:d1:61:d3:6d:e1:84:26:c3:6e:
ab:84:b7:82:55:86:66:6b:f4:c1:4a:06:49:20:48:01:bd:3f:
de:de:5c:f3:e5:a6:f1:4d:30:8f:48:08:b4:6e:d3:e1:f9:9e:
57:15:ab:8d:14:36:33:15:6b:29:e2:09:df:e2:3b:2b:df:65:
59:45:72:df:1e:4a:6a:d7:05:1c:1f:c0:d0:74:6c:71:06:5d:
d0:7a:17:66:0d:3a:dc:57:3c:c3:a7:95:8a:0e:52:ac:0b:dd:
41:da:5c:65:ec:43:a3:31:93:1a:64:fe:90:1c:52:22:d7:40:
1d:0f:62:9b:3c:03:fd:fc:87:7a:b9:ed:e5:89:17:ec:46:39:
8e:00:c4:a2:75:2d:0f:4f:46:b3:5d:29:c3:f4:b4:51:50:1e:
bf:59:99:79:d0:90:4a:a2:78:98:53:38:35:f9:a8:7c:93:bc:
0b:98:31:c5:3c:0c:4a:9f:e3:c5:f3:84:e1:bd:3c:ed:60:06:
15:3a:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:04 2025 by rpki-client