Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: jCRH6dehOgtWs6q8naDkOssMRX1ADE5f8YOpILeuQ6c=
Subject key identifier: 92:51:07:B8:78:D3:E8:46:FF:C1:85:F1:ED:98:6E:58:A2:A5:D8:79
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 0197C4CA46C81F7ECE5C36728C2095AF7908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 154D
Signing time: Tue 01 Jul 2025 07:01:20 +0000
Manifest this update: Tue 01 Jul 2025 07:01:20 +0000
Manifest next update: Wed 02 Jul 2025 07:01:20 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: 7cdlpyo/OdEhQJ9Vg2xjbdjrBCMjbhHMiOdxdur4WhQ=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:46:c8:1f:7e:ce:5c:36:72:8c:20:95:af:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Jul 1 07:01:20 2025 GMT
Not After : Jul 2 07:01:20 2025 GMT
Subject: CN=925107b878d3e846ffc185f1ed986e58a2a5d879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:fb:d7:54:27:27:d3:60:0b:04:ad:03:40:
49:aa:8b:96:e8:69:a3:d0:f5:0c:6a:b6:96:fe:d6:
cd:c3:59:f9:81:85:ab:c0:aa:61:fb:01:3d:a1:b7:
d5:df:06:ff:7a:97:d2:73:e6:30:9c:46:8e:08:ca:
6f:88:f6:15:e0:1e:7e:23:16:61:12:db:c8:21:4f:
3d:da:48:24:eb:45:5f:b8:c0:60:b2:cb:18:ef:85:
b1:58:da:97:c4:50:89:15:f6:7e:4c:e1:39:0f:b1:
c0:9a:d9:ef:3f:9f:bf:66:38:24:37:87:42:1a:7f:
ce:96:e4:46:ae:e4:0d:ae:63:4a:ba:de:c1:a2:2c:
09:ca:a7:b7:c0:34:13:df:9b:70:3b:d1:a9:1f:97:
7f:67:d7:ca:79:34:31:77:11:d2:22:76:c3:7f:31:
17:39:10:da:b2:eb:a6:f4:52:bb:b6:15:bd:d0:a2:
55:b8:b4:4c:a3:98:05:27:a0:38:75:07:ce:34:11:
1f:a8:4a:9e:53:f9:58:1f:66:74:1f:95:d1:52:71:
59:d6:ba:fa:c1:ee:f0:e5:38:ce:e7:93:7c:0c:f8:
2c:c9:28:ab:dd:52:9e:84:57:53:bf:60:10:18:b0:
54:fc:19:d7:9c:05:77:ff:0a:b3:a6:54:5b:d9:3a:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:07:B8:78:D3:E8:46:FF:C1:85:F1:ED:98:6E:58:A2:A5:D8:79
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6a:6b:ba:15:cc:23:d0:5d:3e:2e:72:30:b5:ed:49:bd:06:
96:31:b3:fd:e1:5f:5d:e6:31:11:29:6c:7f:33:09:31:64:40:
8e:f4:c1:89:da:97:4b:56:d3:3a:52:e6:d5:71:72:5e:23:08:
04:6d:20:f0:f6:ed:a4:3e:31:d0:d5:67:20:0c:36:c2:ad:ba:
08:08:bf:47:55:8a:6f:c6:19:60:47:44:56:ec:c2:1b:05:57:
88:ab:ef:b8:b3:af:ee:51:4d:3f:65:17:8d:8e:d3:bd:4f:86:
72:0d:30:5a:1c:88:1a:ae:6d:f4:d0:9b:4f:d4:f5:8b:18:79:
9c:87:c7:90:05:e9:a0:36:75:40:10:0f:c9:94:d5:34:1b:d9:
90:a4:9d:01:7f:01:a8:50:2b:31:8b:5a:fd:05:09:82:d4:1e:
b0:d2:40:4d:70:27:3a:a5:de:a6:94:71:f9:94:0e:b6:08:f8:
5c:82:4b:8a:2e:ff:f7:da:7b:83:21:47:26:ba:d5:42:35:26:
b8:9e:69:f8:c2:da:cc:dd:b9:c3:ac:d3:5a:17:03:94:16:8e:
52:82:5b:c3:9a:4d:17:a1:a0:f2:f1:1f:6b:59:0a:7f:2c:84:
ba:ef:45:2d:e6:50:f1:34:da:34:82:48:ad:e6:99:73:42:90:
26:19:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:57 2025 by rpki-client