Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: y4acse2qRYsNpd1inTXRwB1MY0MeE2wZKHnsq42DbTw=
Subject key identifier: 22:17:87:1A:EE:12:25:DF:6D:C2:62:12:B1:F7:33:31:14:D8:1C:6C
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 01984A0A2CDC2B5E0CC27923BDB2684217D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 04:00:37 +0000
Manifest this update: Sun 27 Jul 2025 04:00:37 +0000
Manifest next update: Mon 28 Jul 2025 04:00:37 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: SgzUgm9t7uyLpHWKjXS51NWu79xd21s6q3hMO70diaY=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:2c:dc:2b:5e:0c:c2:79:23:bd:b2:68:42:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Jul 27 04:00:37 2025 GMT
Not After : Jul 28 04:00:37 2025 GMT
Subject: CN=2217871aee1225df6dc26212b1f7333114d81c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:23:19:d1:71:5e:5b:52:64:be:5f:54:be:
47:a9:d2:e9:13:67:6b:70:8b:45:35:39:e3:3f:44:
76:7c:c6:6b:01:16:00:ad:fc:d8:10:07:34:e6:3b:
33:5b:38:7e:26:86:42:35:03:43:ad:69:9b:4f:33:
e9:f9:e3:7b:ab:d8:48:ed:23:ba:5b:09:53:9a:30:
5f:b2:8e:2b:2a:99:e2:45:5b:ae:8e:f3:8b:9c:05:
c8:5c:25:6c:af:96:a1:66:ea:6b:c1:60:d8:5b:55:
95:cd:6e:d3:f8:9c:ee:77:2c:be:5d:17:be:86:02:
5a:ec:4a:46:f5:d9:42:7d:c3:e1:83:98:bd:fa:9d:
6e:9f:ba:1a:f2:b0:e9:68:dc:74:af:9e:62:0f:cc:
b1:53:55:c5:df:cf:03:c9:35:25:5d:64:ca:d1:49:
16:58:12:9b:5d:3b:0f:65:e7:24:f4:cb:77:19:1d:
1c:15:1b:7b:42:bd:f9:7a:c2:4b:4e:16:d7:3b:30:
d5:a0:40:97:57:0b:0e:21:20:b6:24:62:dc:f1:d8:
da:f1:2b:74:08:d7:c9:fc:82:50:f4:2a:ea:f7:14:
79:89:e0:86:24:f2:fe:71:0b:2d:4c:08:a0:12:0e:
6a:3d:fd:c6:fc:9b:de:d7:57:32:3d:71:e4:22:9a:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:87:1A:EE:12:25:DF:6D:C2:62:12:B1:F7:33:31:14:D8:1C:6C
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1f:6b:3a:be:d7:5f:4c:c2:09:07:ce:f9:53:0d:a7:a9:cb:
6d:4d:7f:20:68:c4:a4:f2:f5:ba:e3:e6:f3:bb:fc:7f:37:97:
dd:89:69:d5:e9:fb:cb:6a:d5:0f:7c:4b:ee:c9:34:a7:12:16:
d8:32:49:95:6b:24:00:12:24:32:5e:10:cd:97:a0:26:d3:bf:
e7:18:bd:c6:e9:65:ee:80:10:db:ec:21:e3:45:be:47:94:13:
10:9a:4a:c3:e6:64:c7:22:f0:4b:18:c5:57:c2:0f:3f:95:53:
bd:3f:16:48:14:18:45:cb:8a:de:7b:36:f7:36:4e:e2:a8:51:
90:11:b8:97:f0:b2:08:23:4e:c3:0f:38:41:bb:15:d3:7d:90:
12:10:6c:6f:2d:65:e2:43:c2:70:cf:73:8b:2e:d7:7c:d3:21:
0c:43:2d:d1:08:4f:b0:b5:f7:c2:56:f2:e5:d8:c5:6c:d5:0b:
6d:9d:28:7a:ba:ec:5f:fd:e1:ab:fe:8b:39:26:fe:fe:98:66:
2b:02:f3:e1:ed:3d:61:e4:86:a1:d0:1f:de:3e:f1:27:dc:e5:
45:e5:46:0e:6c:40:a9:38:25:7c:dc:c5:26:2d:30:a6:4e:5e:
0b:0f:c0:5f:7e:cc:97:7d:c8:79:4f:41:fa:4d:cb:89:d8:50:
79:8e:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:34 2025 by rpki-client