Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: p5w/FuHcBk29xdoJEC1HmokRo2aeORftKbo0NiZPc6U=
Subject key identifier: BF:57:A8:D4:DE:AA:4D:46:D5:AC:F8:14:32:D6:3B:8D:AE:D3:D4:3B
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 0198496539C53EBE592B7122EE779BF956FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: EC
Signing time: Sun 27 Jul 2025 01:00:27 +0000
Manifest this update: Sun 27 Jul 2025 01:00:27 +0000
Manifest next update: Mon 28 Jul 2025 01:00:27 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: fXgvNMk9nc+/FtYB5Xb4oTbjVBufzTHewdtSbwlDeO4=)
2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:39:c5:3e:be:59:2b:71:22:ee:77:9b:f9:56:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Jul 27 01:00:27 2025 GMT
Not After : Jul 28 01:00:27 2025 GMT
Subject: CN=bf57a8d4deaa4d46d5acf81432d63b8daed3d43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:7d:78:5e:39:ce:4c:d2:86:5b:8d:a2:56:
16:e4:47:06:10:42:6a:62:9f:23:34:5b:ab:c2:7e:
0c:7b:34:ca:5f:f9:21:d4:3e:74:c8:94:3e:82:89:
1d:af:c2:94:d0:a5:6b:7e:54:6b:e5:c7:9d:9f:b2:
df:dc:9c:6f:fe:a5:80:a0:56:0f:e2:64:73:1c:85:
2d:ad:3b:0f:05:95:88:cc:1c:28:2b:fe:8c:ba:d9:
1e:bc:33:10:04:d0:47:ea:57:64:1d:a3:58:d6:5c:
91:be:ae:ce:0a:eb:c4:b0:18:6e:5a:81:23:53:25:
40:d5:97:23:48:ba:28:57:db:81:a0:4c:87:ee:01:
09:e2:46:c6:7e:76:50:ad:3e:a4:94:0d:a0:9f:ff:
45:77:a6:f4:68:5a:a5:0e:e8:1e:a3:72:9f:87:52:
7f:75:dc:d7:f2:6a:a1:e6:85:67:0f:48:85:27:f3:
d3:bf:90:5f:20:e4:ee:32:51:33:74:7b:3c:5f:3a:
53:e2:1b:a8:9a:08:14:83:d1:6c:60:af:f5:ae:11:
e2:90:dc:56:f6:f8:89:30:f1:4e:d5:8f:43:75:b7:
9e:ad:b7:89:d2:f6:da:62:b7:aa:47:f7:7c:cf:95:
35:16:36:f9:ca:83:05:d5:ef:33:3c:71:2f:6b:ec:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:A8:D4:DE:AA:4D:46:D5:AC:F8:14:32:D6:3B:8D:AE:D3:D4:3B
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:02:61:07:48:95:bf:b2:1f:70:45:53:4b:d8:c4:81:53:cb:
b3:cd:5e:c7:23:8a:63:e4:65:ab:39:e4:64:4e:79:08:ee:e3:
fa:99:a1:88:c3:d0:9d:be:db:f0:1a:14:31:39:b0:a9:10:b0:
5e:27:08:07:e1:65:da:3b:c1:52:b8:51:9c:b4:03:fc:e1:2e:
ae:55:e8:5f:88:e4:15:e0:15:c7:a9:9b:a4:34:39:4a:9a:a0:
a0:5c:07:9f:e0:c9:8f:f5:8e:10:c9:99:82:f3:e5:aa:a7:03:
c2:24:59:91:ca:48:8b:38:e9:66:6c:17:d2:71:ae:06:dd:0d:
ab:1b:94:6a:86:0c:35:03:e8:5b:0e:b2:c0:5c:3d:6a:e6:0d:
e1:b8:79:b9:31:0d:c7:00:6e:8d:a8:17:aa:b9:4f:44:c6:d9:
6d:a7:29:8a:02:c2:b8:a0:db:a5:a1:13:d3:8d:a4:9f:02:36:
91:01:08:de:33:3f:be:0f:5e:00:c4:8d:cb:e1:23:e1:42:fa:
ed:39:a1:83:34:ff:6f:fa:41:e1:ec:81:2d:82:d9:1b:aa:6a:
14:c6:fa:e7:9c:71:77:67:87:21:b5:13:5b:a8:2f:f9:33:c7:
f2:2f:81:62:5d:72:2c:33:22:a4:7a:fd:a8:26:9e:f3:e7:1f:
6d:a3:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:47 2025 by rpki-client