Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: 9g2FxmFbsYacrubf/HVjFjjJEccMHlzmyYEKytrPBqY=
Subject key identifier: 58:12:AD:E8:EF:85:85:4C:39:51:67:18:4C:84:20:DD:72:1C:37:EC
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0197B7B2E1BF7005645AF6DD2A3F9FD8FEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0D56
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: WI/dYqGfg4AfKBtog3rF1wNtVeSgCbzNPpjNQWr0Jj4=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e1:bf:70:05:64:5a:f6:dd:2a:3f:9f:d8:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=5812ade8ef85854c395167184c8420dd721c37ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:7e:09:21:6f:c2:6c:3a:ac:90:d8:2c:96:
ba:ea:8d:6b:03:e1:78:24:ad:ce:b4:29:a9:92:88:
47:1e:aa:85:fd:af:d0:a6:74:c7:5c:ab:08:f9:6b:
f0:a2:36:a6:6d:fb:94:02:4f:92:a5:95:1e:5a:2e:
1c:38:9f:d0:52:64:e1:64:61:62:44:a4:48:ca:1e:
f2:03:88:fb:18:75:39:9f:1f:78:d6:3f:90:68:f7:
37:9e:cf:ff:50:b4:35:52:cb:0a:3a:e9:2b:42:ca:
f1:cd:41:af:d2:58:dc:1e:7f:49:80:c5:c1:b6:32:
6d:da:eb:e6:90:19:4f:19:cd:d9:0d:43:31:c5:1d:
9f:1e:21:e5:78:21:51:90:32:b1:e5:69:7a:fd:1f:
d4:2e:ed:1d:e4:22:50:e9:fd:4f:70:03:89:2f:07:
2a:c6:b9:25:d4:78:e8:72:c2:82:3a:e5:a5:21:5f:
76:b2:65:86:fa:02:65:1d:53:95:d6:28:e3:de:aa:
03:e4:b1:3a:37:df:cc:7f:83:a7:49:92:42:e0:4b:
65:e4:58:19:b1:c4:d8:ed:8c:20:89:8d:97:9d:36:
3a:1a:83:3b:45:31:7d:88:61:71:f0:89:71:ab:8b:
50:2b:9f:a9:ea:2a:17:61:c0:17:c3:98:8b:68:ec:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:AD:E8:EF:85:85:4C:39:51:67:18:4C:84:20:DD:72:1C:37:EC
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:d9:72:ac:a6:68:a9:41:ad:b2:fe:ce:72:28:e8:df:5f:
00:3c:d5:fc:e6:45:d1:60:a9:8c:4b:7d:7c:51:a6:62:36:0e:
fc:71:ea:7a:25:84:92:d7:fe:14:07:90:0a:cd:c2:05:83:81:
d4:30:e1:bc:64:74:f8:09:d4:21:aa:c0:ed:5b:20:b6:fc:e9:
44:f8:ff:96:69:8f:92:24:e8:80:5a:00:b0:67:81:98:a3:7c:
82:3f:e8:0f:75:72:e5:9a:40:09:b2:70:7b:2e:2e:7a:8d:48:
8a:22:af:37:2d:ab:01:8a:41:df:57:bb:4d:c9:1b:52:17:b3:
01:aa:a2:40:f6:0c:c9:f2:63:89:14:7b:5c:12:1b:a3:b7:4b:
b3:85:15:90:cc:c1:de:7e:ab:ec:c8:d6:4d:91:a4:91:8f:e6:
37:12:9e:30:d7:05:a2:09:8b:80:d3:67:3c:7b:df:29:16:41:
c5:88:9e:3d:ba:91:82:f9:cf:b0:52:dc:10:69:32:4c:de:9f:
85:40:d6:68:9d:37:ab:5a:ef:9d:04:74:a5:12:36:01:f2:5d:
b6:a8:2c:e4:55:30:19:d3:a3:7f:8e:b6:31:75:70:63:72:80:
f5:c9:76:44:3d:19:7f:2a:d6:72:e5:e9:e6:fb:a4:91:79:dc:
f2:d3:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client