Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: 4vkU8wn0/OCg4uz6FTjyeACsa0U1sOPIU9JhBrip0PI=
Subject key identifier: AF:8F:71:0E:8D:56:A7:7E:9C:03:EF:09:27:34:75:69:41:A2:64:ED
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0197B77C0AD0DA1BF8B5DA2D8C87279F8EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 033C
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: 1wmhuhbHSUgUK60f4ODg/VjBI28RgSLhof5e9vSRNW8=)
2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0a:d0:da:1b:f8:b5:da:2d:8c:87:27:9f:8e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=af8f710e8d56a77e9c03ef092734756941a264ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:b3:0c:f5:6f:1b:e7:ff:b8:67:78:3e:04:
d1:5d:f1:0c:59:60:0e:ee:a5:cf:ef:de:d6:c2:58:
eb:7e:4d:6f:b5:7d:00:84:9c:38:6e:56:1e:e9:c7:
07:05:06:d1:5b:39:43:c1:65:51:c3:89:d2:8f:c0:
3e:7d:20:bf:d3:5b:16:31:4b:11:7a:37:16:fa:57:
af:b0:17:ed:be:1f:2e:6c:50:04:cf:6b:43:0d:46:
57:ac:3e:8d:ce:77:50:e0:48:74:a4:c1:11:f5:60:
01:6f:84:d0:79:ff:74:8a:bb:ae:aa:f1:b6:27:30:
67:65:75:c4:26:f0:7c:eb:78:88:db:14:64:ac:ea:
a3:e5:0d:5a:9f:95:b3:70:64:ea:d2:bf:bd:23:a7:
37:21:83:1d:fb:da:52:fb:de:81:ee:de:3b:5d:20:
f7:95:be:8b:0c:03:f3:0c:50:33:32:f4:34:b6:b3:
ca:c6:72:6f:39:f2:d3:d2:d8:b5:e2:ff:67:58:b8:
5e:4f:03:7b:a8:4e:67:9c:14:94:66:86:90:41:ce:
bd:69:21:83:08:d1:08:dd:ca:1f:db:9c:5d:f0:97:
1b:8e:6b:0e:f8:5e:21:ed:1f:14:cc:63:94:79:e9:
cb:59:ed:13:07:96:f3:78:be:2f:99:4d:16:45:9d:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:71:0E:8D:56:A7:7E:9C:03:EF:09:27:34:75:69:41:A2:64:ED
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:9a:00:0d:3d:48:3f:de:ea:dd:d8:fd:16:f7:c1:fd:bf:
0c:d7:f7:0f:9d:71:b0:0f:a1:83:61:99:88:1c:7f:cc:d9:86:
d9:c5:49:68:e5:45:67:b1:04:e8:32:c2:94:3a:ee:d3:a5:e3:
ce:5b:06:75:90:c7:24:dd:aa:8e:bb:aa:1c:81:75:ac:69:2a:
c7:e4:c1:6e:52:ff:fa:10:99:8c:31:30:29:d4:a4:e0:5d:65:
5e:f1:e3:b9:a7:12:81:d9:8c:76:c9:3d:72:cb:0d:5a:b8:c2:
5b:5d:ac:54:32:f1:f3:74:3e:f4:c1:b0:90:34:40:68:17:e6:
00:26:12:9d:0b:61:52:77:c3:04:91:5f:02:00:11:8e:4e:0d:
61:71:f8:9b:b9:d9:80:aa:d3:57:ad:c6:38:1c:a4:a4:e9:ed:
2f:d0:71:06:1f:f2:86:cd:85:ab:4f:08:ee:2b:83:fc:37:92:
e8:d5:7e:63:ff:b9:57:92:6e:cd:de:14:79:07:0c:ce:f0:3d:
a7:f1:52:d8:7a:4c:ac:a9:28:59:fc:e6:d3:b6:4d:8c:9b:16:
87:99:05:ce:ca:6c:7e:7b:1c:59:c8:b7:ae:2b:c6:23:19:54:
4f:c8:78:01:02:67:29:b1:05:b0:e0:81:3d:78:de:07:aa:76:
46:fa:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:02 2025 by rpki-client