Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: ba6jQZa9Jbqo9qgsWKxIDAaoN3cLHs1Cu54p3XHodks=
Subject key identifier: AE:8F:77:7F:A6:02:69:D6:92:D1:66:EB:5D:C1:55:C3:F3:7D:84:CB
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 0197B7B35B80F8096F2DF8AC544E24C0DB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 0433
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: hqjTPPpAa+SnU9pA/DkXSr/Wt63K0n55o37xnPcuM9Q=)
2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5b:80:f8:09:6f:2d:f8:ac:54:4e:24:c0:db:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=ae8f777fa60269d692d166eb5dc155c3f37d84cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:ea:70:6f:73:23:ff:93:8e:e0:f7:c2:eb:
eb:01:1f:f7:4b:c7:6f:bd:83:9b:e7:09:89:58:8d:
b5:15:94:c6:55:77:04:df:cb:f9:fc:14:50:8a:1b:
73:3b:f8:44:66:58:34:5a:ee:f5:a6:8b:fc:40:c3:
dd:68:1e:8e:98:41:14:d3:90:60:72:68:93:da:7c:
40:47:2d:04:42:01:ac:7e:27:14:79:90:ea:1f:33:
31:41:03:60:a9:38:90:f4:a2:69:d6:5a:0d:d1:2a:
3b:ae:de:79:90:2f:49:2a:ad:57:cd:68:d2:82:e3:
91:5b:94:2d:01:66:ae:0e:74:a9:56:f1:9a:2d:a8:
90:aa:94:59:2b:ad:59:7b:ba:0c:30:3e:c0:c9:87:
03:fe:68:2b:c5:96:c9:33:dd:57:eb:3d:18:a9:8d:
4f:ba:be:85:0c:eb:81:9e:bc:37:22:ab:f6:52:e6:
68:d3:09:de:c5:5f:51:3c:02:0f:6c:4f:3c:df:21:
3f:75:8d:88:06:87:25:68:e1:07:49:14:56:a0:15:
3d:d0:b3:f9:48:9a:1c:c0:67:6f:9b:8f:d3:c5:e0:
2f:ff:41:0e:a5:69:ee:9f:31:d1:fa:cc:14:10:81:
21:d7:80:c8:13:a9:50:7b:86:29:f9:99:e2:ae:1e:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:77:7F:A6:02:69:D6:92:D1:66:EB:5D:C1:55:C3:F3:7D:84:CB
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:fd:bb:52:a4:b1:79:fc:c3:c9:5b:e5:55:15:e4:ee:13:
d4:37:09:5e:0c:ac:ae:e0:06:c6:71:f5:fe:20:8b:17:92:4b:
1d:52:40:f5:ab:a1:26:0b:e0:0e:56:55:19:28:31:14:bc:2a:
26:75:1b:0f:b4:24:ff:4a:a3:0e:8e:b2:5c:8d:40:b7:1d:42:
8b:16:92:8d:eb:93:e0:57:ac:80:f6:c4:6c:a5:ae:23:fd:97:
fa:46:a6:84:c9:05:d4:7d:21:dd:a2:55:d2:34:a0:ae:18:28:
cd:a3:6d:ee:bc:66:0d:67:7e:22:04:68:6c:b7:a3:1c:c7:be:
ef:a0:2f:7d:55:a4:1e:7f:de:19:50:fd:d3:7f:71:dd:5e:d3:
be:2f:21:f9:51:2d:f6:a1:90:e3:72:7c:96:81:ce:40:8a:d3:
cb:be:b4:e7:66:d3:77:d4:66:e1:60:ae:ff:88:21:97:79:92:
dd:ce:df:f1:9e:0a:d6:e6:4d:af:26:12:38:fb:70:b8:16:62:
b2:45:7d:a5:f1:ee:15:18:86:41:21:fc:4c:76:10:90:79:63:
28:42:12:25:74:f6:c4:8e:50:9b:b7:38:05:f4:cf:50:2a:9a:
c8:79:5c:9c:48:c1:e2:d5:1d:6c:78:35:96:ab:85:da:a2:2a:
fc:01:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:20 2025 by rpki-client