Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: 1QMl4CRMoh2UbM+YRwIZ56cGR2QWTt9N476asIalJQI=
Subject key identifier: C5:30:BD:74:7B:3B:81:1D:16:0D:78:38:CB:D7:56:4B:05:8A:30:D6
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0198D6605C9052E59739ED78BCDBC828159B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 025E
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: WI9A1Eq+9z9ypQtFvnEpGAzfNhl18NTiLkMcJRSV34U=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5c:90:52:e5:97:39:ed:78:bc:db:c8:28:15:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=c530bd747b3b811d160d7838cbd7564b058a30d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:fe:09:82:08:47:a9:c0:cf:3e:2e:93:27:
8f:0d:de:b6:8f:04:ec:7d:8f:63:6e:50:2d:7c:e1:
ba:28:b2:b1:92:a5:ad:26:32:b4:b1:3e:74:27:8b:
5f:64:7e:c4:05:81:3b:8b:76:72:5a:9e:a4:3d:0a:
dd:13:1a:ff:f9:d1:53:24:d7:68:d4:34:69:26:e3:
72:76:db:f1:33:ac:a5:c7:8d:6e:b3:b9:25:79:45:
3f:75:c5:7c:42:ca:ab:f8:8a:a8:90:b5:23:01:94:
79:23:24:98:e6:48:74:a0:8a:d5:df:89:95:24:4f:
d3:5d:9a:40:7e:53:7d:2c:43:ce:30:cf:73:3c:1b:
4c:2a:e4:8e:7c:68:6b:fc:67:ae:92:8f:30:63:41:
64:5e:88:cf:3c:bd:01:2d:2a:f6:b5:62:8f:db:f2:
38:e4:4d:a3:ae:dd:92:e4:16:ff:0f:4b:af:89:8d:
81:66:84:34:8b:83:3d:8d:97:e9:62:07:1d:ab:2e:
3e:86:3d:46:40:90:65:e4:49:b5:fa:f1:5b:dd:d5:
b9:6e:09:9f:73:9c:ed:38:da:99:51:d2:a9:5a:57:
c2:85:f3:64:1a:a4:93:5b:31:ed:24:55:a3:17:93:
7a:5e:1a:25:1a:38:a5:a3:80:89:a6:05:fd:35:9c:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:BD:74:7B:3B:81:1D:16:0D:78:38:CB:D7:56:4B:05:8A:30:D6
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:31:d6:92:92:fe:f0:64:24:3b:1d:b6:7c:4e:87:a3:23:46:
9f:5a:76:e1:9e:71:f1:34:14:aa:38:e0:5f:92:03:ca:7c:93:
fe:d4:46:90:76:15:ca:9b:e8:43:89:5c:0d:d0:bc:3d:1a:df:
96:1c:1d:0f:0a:46:4f:9e:eb:9f:74:a7:84:ab:22:22:26:d8:
76:bf:6e:cd:01:ad:0e:71:e7:70:6f:d3:e5:ad:bb:ff:8b:4a:
e7:e0:1f:2a:6e:c4:82:b2:ca:11:e3:53:2c:83:ce:39:d8:f5:
1d:e9:55:69:b8:6c:cb:0c:8c:aa:5a:e1:fa:70:7d:1b:7b:a7:
eb:b8:18:49:d4:77:f3:db:46:ca:1d:ec:d8:8c:d6:97:1b:35:
3d:bf:73:c2:31:80:26:e7:77:6b:04:46:5d:2f:c5:5c:8b:84:
6d:bf:a5:fa:8c:4a:7e:e2:53:99:ad:8d:4d:cb:18:2a:9c:31:
09:97:04:9d:fc:85:bc:b6:4a:85:74:bf:d4:0b:10:68:5e:b2:
8f:2d:bf:93:2e:48:ba:f2:16:1f:d3:88:e9:33:0a:d9:59:95:
4f:92:d7:4e:47:9a:95:ad:c6:b5:74:c7:a0:da:3a:df:46:f2:
00:ab:69:b1:a6:cc:19:80:25:c4:bd:ff:3c:5d:49:d1:77:40:
4a:fb:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:24 2025 by rpki-client