Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: AKyo04TOUWTiFKtuPjxWQ3p0DNzTH6YytWQw98DT8kw=
Subject key identifier: D6:D7:9E:92:D7:07:E0:28:E2:19:9D:EA:9D:D8:C6:CA:2E:D4:B4:88
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 019858D918C2FDDCBB88FE0A0242DD5A5BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 021D
Signing time: Wed 30 Jul 2025 01:01:19 +0000
Manifest this update: Wed 30 Jul 2025 01:01:19 +0000
Manifest next update: Thu 31 Jul 2025 01:01:19 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: GLVhhouVxVdjVL6/IENCvbD2+ninnRQ/R+EKtKKwRb8=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:18:c2:fd:dc:bb:88:fe:0a:02:42:dd:5a:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Jul 30 01:01:19 2025 GMT
Not After : Jul 31 01:01:19 2025 GMT
Subject: CN=d6d79e92d707e028e2199dea9dd8c6ca2ed4b488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:ad:20:26:8c:2c:d0:28:e6:3a:58:7a:54:
27:22:36:97:33:f7:5a:1f:94:d6:c7:a0:22:2a:ea:
e9:95:dd:8c:e1:0d:f0:81:5d:ba:1f:ad:9d:83:95:
56:16:d3:da:03:aa:77:0e:0f:d7:3c:6e:09:55:33:
88:2c:c0:62:c3:96:27:db:97:d0:f7:25:01:85:03:
c8:85:62:cb:4c:c1:26:48:94:63:c8:85:e0:ce:08:
a9:87:c6:8b:d1:c2:08:de:82:a6:a5:e0:61:73:94:
2c:d7:cb:ec:dd:02:8d:99:fb:f0:1a:7e:85:c4:51:
b6:e5:e1:e2:a5:c9:c2:e1:3c:7c:5a:14:e9:2a:46:
a1:40:49:55:57:44:1f:cb:55:a7:56:47:8f:f3:7b:
e7:73:22:09:e2:3c:f8:a6:98:81:36:74:af:4d:95:
90:f2:fb:b9:99:32:2b:11:52:34:ad:9d:c9:2b:08:
00:1c:3b:b7:f2:dd:21:85:0c:4a:42:da:7e:2c:9e:
5f:c1:8a:a3:ea:ca:28:39:80:0c:b6:bb:aa:36:d5:
83:c8:ee:77:bd:df:3b:f2:3c:9c:04:9d:80:4f:10:
44:2e:47:49:0a:bf:04:e5:c5:d7:50:6b:78:87:bd:
4c:b5:3f:4b:1c:53:b9:ec:f8:14:56:08:82:ab:41:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:9E:92:D7:07:E0:28:E2:19:9D:EA:9D:D8:C6:CA:2E:D4:B4:88
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:4b:58:6b:4c:81:8f:a8:e2:c0:d5:5e:e9:5b:96:12:ee:
78:74:73:2b:43:c3:e2:93:60:01:b7:ae:8d:79:37:53:e4:57:
d2:12:28:f2:38:b6:5c:89:1f:44:42:ba:65:40:67:e0:e7:ff:
71:80:98:61:bd:1c:35:b5:62:30:fb:54:28:2d:18:ad:67:a4:
e8:b7:e9:9b:97:63:78:05:54:21:97:5e:12:f8:b4:53:af:41:
91:d5:30:6a:67:a8:dc:d2:e1:82:90:e7:57:1a:19:9b:45:01:
be:77:dd:cd:01:57:6c:7e:9a:e5:83:03:78:38:b5:69:64:5e:
9a:6e:34:05:84:71:c0:1d:88:da:5e:f9:d7:ae:47:b1:95:53:
ab:28:55:d2:0c:57:8a:14:2f:3c:73:a1:bb:1d:e8:58:5d:a4:
58:85:77:38:e1:eb:36:5c:18:f8:38:3c:a1:16:00:dc:18:96:
af:1e:c5:fd:c5:4c:b7:d0:69:df:f9:39:b9:d3:7e:ca:97:32:
83:76:6e:0a:9f:24:5a:12:ef:b2:5f:a3:3e:c2:3a:ce:13:5d:
7d:1a:bb:6e:1c:fa:e9:27:95:e7:da:5a:67:63:28:67:57:16:
c3:07:70:4a:cb:d4:7f:21:84:1c:31:77:4b:10:b1:69:3d:a3:
39:0d:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:43 2025 by rpki-client