Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: 9W0jVlXoxQojJ5uQbcqeUcvS03RVzZgrVsGhffoASWM=
Subject key identifier: 4B:C5:3E:AE:C2:F9:A6:62:B8:86:2F:CE:6E:5F:3A:32:21:74:79:58
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 0198D4A7F47D2110CB9887599A5744BF70B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: ppFlRg+fCUrTL5wJhkbMZVAy5h1yreILJoqQJsS4w2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f4:7d:21:10:cb:98:87:59:9a:57:44:bf:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=4bc53eaec2f9a662b8862fce6e5f3a3221747958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:4e:26:16:49:82:38:b1:29:d5:95:5d:b4:
67:f5:1a:f6:fd:d8:e9:73:59:c4:49:3a:b4:c5:a4:
25:f1:68:44:d5:6a:82:7a:73:30:67:c4:56:c2:77:
c4:27:d2:66:5e:ee:74:6e:be:08:68:b1:e3:4f:57:
84:75:d1:7e:e7:23:31:a6:c7:67:6c:66:96:b3:d9:
4d:9a:e2:98:fe:2a:45:3a:81:81:cb:9b:c4:6c:af:
2f:1c:70:ee:d0:95:5d:71:a9:2f:a0:e4:a5:14:43:
1b:2d:9d:ce:12:b8:98:60:7f:97:8a:7c:d8:80:c1:
80:3b:97:29:22:6e:c2:72:06:3e:d2:2d:6e:98:80:
1c:52:b1:c4:bb:06:c1:ea:08:d4:d0:5c:a3:f9:65:
d6:86:79:ba:d9:53:52:a8:22:e2:85:f5:25:8e:f9:
74:16:12:2f:c5:60:24:fb:55:b0:12:bd:50:dd:eb:
56:49:68:26:fb:72:4b:39:ea:5e:83:f1:04:6c:50:
69:df:60:f3:6d:41:96:db:48:90:5b:28:20:6f:06:
ea:cb:b9:eb:18:29:38:93:6e:d2:1d:04:c5:ae:a0:
7a:5c:f1:fb:7f:b7:fe:78:e7:f1:b9:bb:6a:cb:19:
1c:fd:88:e8:e4:05:98:c9:b1:30:f2:43:34:3f:03:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:3E:AE:C2:F9:A6:62:B8:86:2F:CE:6E:5F:3A:32:21:74:79:58
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:02:05:3e:b2:cb:f4:13:a4:ae:ef:ea:e8:ef:81:4c:d4:c6:
85:3d:c5:42:f0:09:35:9b:7a:d7:a8:84:eb:82:df:d2:f6:a5:
7a:24:5b:f3:5d:6e:a6:c0:f9:f1:4d:56:60:b6:ce:74:42:1e:
ef:e1:40:de:12:3f:20:f1:b0:5d:36:4e:7e:ab:6e:84:ca:8e:
f2:f9:88:2d:3f:68:d8:e7:9a:9b:40:8c:4d:4c:f2:93:9c:bf:
96:8f:3c:dd:36:35:7f:63:19:97:1d:25:9c:8c:ba:84:3a:f6:
9e:3a:81:e1:49:09:37:46:74:67:d1:a2:ff:45:04:2a:51:0b:
a3:da:83:e1:ff:35:57:3c:39:5c:0d:c4:22:f8:f8:0c:18:7d:
d9:36:77:0f:d0:0a:05:83:aa:61:7c:2d:ad:c9:26:f1:10:ec:
eb:2a:96:fd:f5:c0:24:82:32:9a:6a:45:58:dc:ea:84:a4:3a:
23:2d:3d:e4:bd:fc:12:b5:08:33:e8:bb:aa:f5:81:bd:e5:fa:
4d:21:ab:14:61:83:8a:fa:51:a0:b7:2c:d5:ad:7d:6f:2b:91:
e1:e0:e0:89:01:1d:63:5c:ea:52:2e:53:43:e6:0d:18:15:11:
bd:fa:d0:88:8a:e8:ae:f0:d5:d7:13:87:c7:93:1b:cd:ba:1c:
e1:5a:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:42 2025 by rpki-client