Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: GDEWq+Gzo0Ptar6a1GETKKnqr9FqmD7W6BK9LbkaphE=
Subject key identifier: B9:3C:86:C8:D3:70:62:59:2C:B0:BB:82:16:92:3D:33:16:5B:C5:DC
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 0197C8DDB4BC703CC9C1CBF9E6C1BC57D17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 02:01:02 +0000
Manifest this update: Wed 02 Jul 2025 02:01:02 +0000
Manifest next update: Thu 03 Jul 2025 02:01:02 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: 9WDNG0CgQzk9yNaOZtSmDdzmOpxjrMytgFRrqt8MgOY=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:b4:bc:70:3c:c9:c1:cb:f9:e6:c1:bc:57:d1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jul 2 02:01:02 2025 GMT
Not After : Jul 3 02:01:02 2025 GMT
Subject: CN=b93c86c8d37062592cb0bb8216923d33165bc5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:82:b0:76:2e:14:55:d2:2b:53:95:fa:59:
e2:84:35:85:a7:05:19:a3:9a:83:01:83:9d:06:2a:
90:31:ba:c6:bb:ed:4c:a7:e5:b5:80:7e:7a:48:51:
7e:c6:51:fe:29:c5:46:25:76:db:b4:ef:b6:9a:de:
e5:63:a1:c4:60:aa:2e:04:e6:7c:16:eb:94:0e:57:
b5:d6:c8:5a:a1:d3:51:ac:97:2d:72:75:d2:65:8b:
31:bb:cd:36:65:59:f3:1b:c1:7c:27:04:cb:d1:ee:
9c:4c:71:bd:46:6c:16:20:cb:61:50:ff:7f:c3:08:
f7:c5:07:8a:02:03:71:3b:a2:c9:60:d1:3f:61:95:
e5:5a:cc:34:99:23:61:57:5b:6a:3e:e8:d5:83:7b:
aa:b0:bf:24:75:e6:62:93:9c:a6:54:c5:23:6d:73:
46:2e:3a:86:ec:be:6d:eb:52:cb:e6:30:d1:42:98:
f4:39:3a:ea:0a:e2:11:ae:8a:b9:e2:b2:0f:2b:4d:
0e:80:8d:45:43:f9:eb:e3:7a:24:37:f0:6f:06:85:
92:18:34:11:8d:09:be:15:9c:e3:7d:62:53:43:4d:
79:7c:fb:91:d8:ee:71:4a:8d:d7:d3:b5:cc:ca:a0:
c2:20:b3:43:e9:35:bc:0a:99:a9:7b:c2:c9:3d:ad:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:86:C8:D3:70:62:59:2C:B0:BB:82:16:92:3D:33:16:5B:C5:DC
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:ba:34:7e:8e:ec:ce:82:c2:79:54:7a:3c:b9:21:ff:eb:
e8:0b:11:7c:42:07:ce:49:05:0a:6c:d9:56:0d:31:33:40:ce:
bd:a0:b2:f0:fc:18:38:f9:d0:d2:b1:1f:27:8c:e6:e1:cd:d4:
01:8a:67:65:7e:04:b2:48:51:93:7c:15:1b:42:37:cc:8d:59:
bc:ef:56:f7:b2:df:52:2f:ba:77:5d:15:14:c6:b0:d5:ed:fd:
99:22:3b:5f:7a:bc:bc:ca:ea:a8:39:72:f2:4b:43:5f:73:90:
f2:ee:76:bc:e9:a9:f9:37:f2:65:98:b8:57:2b:a7:32:e0:68:
c1:34:f1:95:f2:9f:0f:4f:e8:6f:a3:8d:24:e1:82:23:78:93:
ea:07:df:d1:c4:07:63:cf:eb:f4:d1:ea:42:56:8a:23:65:c7:
2f:91:c1:1a:b0:fd:2a:6f:f8:5e:76:59:79:74:22:92:ff:25:
1e:0c:a0:2a:e1:4c:66:9c:ac:69:13:94:8f:6e:41:7f:72:cb:
4f:c8:66:3b:a9:64:26:42:ef:e2:56:cb:28:b7:70:98:08:1d:
39:0a:6d:af:ff:52:d8:4c:78:04:a6:e4:2c:4f:7a:fb:62:ac:
0b:3f:25:48:02:21:5d:83:e8:36:4f:5a:0f:5d:97:13:d1:05:
79:80:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:30:40 2025 by rpki-client