Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: NOsKr/OSarcHZdLQq5M14ROldihPKwkjIql5/pm87Gk=
Subject key identifier: 1A:C1:9A:0D:E1:36:03:38:F6:65:5C:BA:9F:7E:4F:53:09:D1:B2:D8
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0198D58401DA0D78B3D8282D8BC7F0A96914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0DEA
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: Z9c7lBk1hibbAIUcKleBH/OZnARLr3sAaOSrIL09n90=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:01:da:0d:78:b3:d8:28:2d:8b:c7:f0:a9:69:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=1ac19a0de1360338f6655cba9f7e4f5309d1b2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:71:15:67:ca:31:3f:7b:d7:69:68:80:b0:
48:14:54:a9:d5:6d:8e:e5:cd:fe:9f:03:6a:54:49:
00:a5:14:02:b0:2e:54:e8:4f:1d:4b:f5:1f:7d:c2:
2c:32:55:1b:fd:c7:77:ac:f3:b1:44:11:b8:2e:2f:
7e:1c:1f:33:28:2b:d2:fc:33:a1:d3:7c:65:a6:f5:
24:a2:6d:31:90:06:7f:6e:22:83:1a:de:06:28:53:
45:b3:c0:32:5b:d0:e5:8e:3e:ec:66:f9:3c:33:8f:
6c:79:d8:2a:f7:af:24:eb:05:d2:7b:af:90:89:d9:
5c:30:d5:3c:54:cd:b2:cc:5d:5f:02:13:90:45:22:
b8:1b:b4:ec:c7:3b:ad:9e:84:d1:07:b8:50:21:e3:
3b:a3:67:00:c2:b9:28:41:95:50:f7:d5:e3:b5:04:
18:27:90:9e:28:dd:7c:ce:06:ff:e6:b4:1a:33:9e:
2a:96:31:5f:95:13:6a:e5:74:53:a7:44:74:ab:3b:
72:14:89:5d:9f:3b:f1:0a:5e:2a:89:d5:6d:db:c0:
2f:3a:38:6a:3e:9a:84:e4:3a:7e:f2:59:8d:07:c0:
a6:df:e7:b5:f0:1d:05:a1:09:81:ce:67:aa:88:bd:
fa:2d:78:78:b8:0d:d3:af:78:fb:84:34:3d:8e:f8:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:9A:0D:E1:36:03:38:F6:65:5C:BA:9F:7E:4F:53:09:D1:B2:D8
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:f8:7d:6c:8e:e0:3a:ce:5b:27:57:fc:8f:93:1c:86:46:
ae:4d:41:50:45:bb:ca:78:f5:7d:ad:90:b9:e0:eb:b9:6a:41:
47:9a:58:2b:2b:b4:95:9f:9c:4b:79:11:1a:87:0d:02:c3:73:
52:95:57:31:1d:c2:0c:a8:17:a9:26:a9:cd:87:7a:86:22:9a:
c6:cd:ee:fe:99:a1:aa:79:1e:9d:7d:9b:d3:f0:f0:2f:6d:4f:
c6:a6:8d:c0:a1:c5:1f:80:77:bf:5e:54:2c:29:30:b0:5c:86:
14:b7:34:26:30:ea:48:e6:c5:9d:aa:4b:c5:14:c3:1e:2e:f7:
92:d7:4c:06:5b:1a:f8:3c:78:f8:5c:c8:1a:58:87:37:8a:47:
59:11:40:2c:1b:d6:5a:de:7a:c8:70:88:c2:74:37:9b:87:98:
b9:eb:a0:ea:16:d3:f7:4f:be:a0:dd:10:e2:4d:a6:32:31:08:
98:a5:a2:4b:68:3b:67:e3:f9:f9:53:de:f7:55:f5:35:f4:22:
c0:10:b7:77:c2:9e:0e:3b:3d:c9:a5:84:48:59:a0:ba:72:93:
f5:44:3c:98:52:98:01:c3:14:95:b3:8c:c8:c1:71:fd:49:41:
29:32:31:da:f7:1a:98:6f:7f:ef:ad:ae:fb:3e:92:7a:e2:10:
11:44:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:08 2025 by rpki-client