Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: 4wkVX5M3J/fVhk3+32dUcucDZy6ias5+aveRG1+krwY=
Subject key identifier: 71:2A:22:FD:44:DA:DB:48:10:6E:3D:62:D8:60:51:79:C5:B7:38:AA
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 0197B70E9B73446A0B032AC73A2AF320FC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1391
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: RLX8v4bHMtT3HuXNX8Hrq3rw2aBROSnTxOJUX6wOr70=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9b:73:44:6a:0b:03:2a:c7:3a:2a:f3:20:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=712a22fd44dadb48106e3d62d8605179c5b738aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:dd:c1:56:61:80:5f:06:e3:1f:5d:9e:bc:
3c:df:b1:7d:3c:ab:43:58:4f:1c:d4:7b:78:9b:d7:
bd:fe:e8:39:53:68:6f:ab:c0:4a:50:a2:4f:e7:47:
69:ee:60:43:bf:5d:f0:41:68:40:f0:c9:c1:27:35:
47:c2:42:4e:90:e7:fa:91:b4:2a:93:19:87:27:35:
72:52:85:2f:5e:cc:87:32:38:e5:d3:f8:f4:fd:b8:
cc:9e:ec:ad:57:cd:d6:20:e5:71:b5:c7:ab:e2:1e:
fd:51:e1:86:99:d1:93:e6:c5:2c:ed:88:02:ee:02:
e2:21:1d:99:d5:99:88:e3:d4:5a:b2:f5:43:6f:82:
c9:ad:c5:6e:05:57:4c:6c:98:3c:2d:fd:ef:7e:48:
f1:98:fd:6e:5d:62:2e:87:32:68:45:f7:fc:20:f4:
de:0d:1b:4a:cd:67:f2:4d:d1:ae:5a:b8:25:34:92:
dd:e8:75:41:86:1e:dd:5d:77:3f:52:05:81:3d:cc:
83:66:de:e1:2b:e1:e1:54:88:85:1c:06:24:1c:02:
8b:d2:2a:85:f7:e9:09:df:ab:8d:14:06:5e:4b:8c:
50:7c:7b:53:94:c2:16:fe:29:26:ce:e6:ab:91:c3:
4c:ff:b2:28:ea:ee:23:88:5e:09:f5:d5:d8:b4:63:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:22:FD:44:DA:DB:48:10:6E:3D:62:D8:60:51:79:C5:B7:38:AA
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e5:ba:97:b4:40:87:63:ed:b7:00:66:82:8f:f4:f7:ba:9c:
95:67:4d:e8:bb:10:1f:af:ce:0a:85:85:a4:26:24:22:c9:2e:
a9:f0:97:30:b0:68:45:75:6a:f4:0c:76:98:5d:04:44:12:a9:
47:bb:e0:11:94:68:d7:42:1d:56:11:8a:e5:10:5b:6d:c3:26:
12:c5:7b:ae:78:e4:c4:53:dd:ce:50:f4:0b:01:37:d9:13:79:
39:fd:9a:c4:f5:78:24:ce:1b:67:d1:52:58:58:29:76:31:b8:
56:de:ad:f5:a0:9c:23:bb:02:27:93:d4:7b:1d:c4:f9:db:d8:
05:27:e8:64:20:83:f7:f2:1f:13:b3:1b:48:14:dc:16:e5:df:
13:56:57:fe:98:c3:1f:08:81:f3:ed:60:6f:95:a3:ee:11:b2:
87:a8:6a:fc:db:d5:fc:42:8c:8d:c7:35:d7:75:e6:44:7a:02:
bc:50:25:c2:a7:72:24:65:93:ed:ef:96:a1:38:69:c0:e3:65:
e5:49:d9:e6:b3:16:93:b0:8a:8b:1b:83:a7:cb:fe:81:24:b4:
f1:fc:0e:73:c3:2b:70:2a:82:64:e2:fb:a3:6d:ee:ec:53:25:
9d:0a:9c:e1:ef:0d:80:79:bd:56:8c:d9:56:fd:bb:79:54:01:
8c:e8:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:01 2025 by rpki-client