Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: d7DbddLJQqRAbnrmaP5IpB/6l6bMl7NAv450W37Q5NU=
Subject key identifier: 60:9C:2B:F4:7F:3F:75:30:E7:AB:ED:87:41:E0:29:2E:70:A1:AB:8B
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 01984588854667FA9148603DA040C1818E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:00:31 +0000
Manifest this update: Sat 26 Jul 2025 07:00:31 +0000
Manifest next update: Sun 27 Jul 2025 07:00:31 +0000
Files and hashes: 1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: VAPxvco5rEU8W0iUyA2DwfEohnQYpmh5z3tJvMhf53c=)
2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:85:46:67:fa:91:48:60:3d:a0:40:c1:81:8e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Jul 26 07:00:31 2025 GMT
Not After : Jul 27 07:00:31 2025 GMT
Subject: CN=609c2bf47f3f7530e7abed8741e0292e70a1ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:2d:5e:59:bc:c6:f5:bb:0b:d6:dd:1a:e6:
d2:d0:5d:80:f6:62:12:7e:66:2d:e2:e9:4c:2f:b4:
c2:91:8b:cb:43:67:35:f5:e6:83:db:b4:40:98:6b:
34:9d:b8:d1:76:0b:63:82:28:26:b8:6c:b3:c8:ed:
7e:d2:31:50:b3:60:8d:e4:4e:30:df:61:6f:03:bb:
eb:7d:87:69:e6:2b:5e:5b:be:9b:4e:d4:ef:b6:3d:
1e:fc:7f:fd:2c:54:9b:42:0e:75:6b:c5:f1:0b:2b:
a7:bc:99:a1:3e:25:5b:cd:7e:6d:7a:34:21:c1:85:
43:e6:59:d0:0e:94:99:3b:94:8e:57:6c:cb:1d:3e:
ac:01:d2:66:ff:88:3d:9b:96:81:38:41:a9:30:93:
5b:62:20:52:17:61:31:d4:75:8c:c9:4a:a3:55:90:
e2:96:f6:65:d4:65:de:27:21:9a:b1:26:c0:3c:fd:
04:7d:f4:45:27:e3:16:b5:95:0e:05:5d:e4:b1:36:
85:0e:d3:42:cd:84:01:6d:8a:dc:6c:3e:5a:be:ca:
31:bc:95:2b:e8:28:72:8f:21:13:01:3c:a1:77:17:
4e:be:17:af:47:6f:bf:72:c1:ba:52:c9:fb:c6:fb:
c9:df:dc:4e:88:5e:a5:96:63:29:87:b6:64:07:f8:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:2B:F4:7F:3F:75:30:E7:AB:ED:87:41:E0:29:2E:70:A1:AB:8B
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:27:62:a8:6b:c7:ba:13:76:14:47:f3:10:68:3e:23:77:44:
f0:fa:c9:f9:cc:c4:f2:5a:90:a7:96:e6:3b:81:67:ac:f5:68:
e6:6a:4e:6f:df:e3:94:a0:51:a0:5a:52:3c:08:e9:f2:84:e4:
38:77:fc:98:d0:8b:1c:12:c7:77:5c:e2:ab:17:f5:f4:6f:d4:
4a:4b:f8:e5:26:24:31:34:9a:9e:26:ee:68:00:58:26:8a:5c:
3b:d0:96:ee:fc:81:e0:66:87:32:a5:d6:ed:09:1f:c0:37:81:
5c:23:f6:44:55:f7:4a:c4:9f:d8:b1:61:1f:d9:28:cc:10:3b:
b4:3e:8b:2b:65:aa:15:8e:34:6e:bd:b3:35:d5:09:b9:fa:16:
c6:87:9e:fb:38:fe:2b:59:31:5c:1e:4c:5c:b4:61:c3:4f:3b:
d1:4c:31:71:cf:34:b7:64:03:c6:ea:9b:10:86:0c:4b:6b:52:
65:b5:55:7f:34:33:f5:02:11:68:84:00:85:89:40:b7:49:dd:
38:3d:61:7e:61:3d:ac:2c:31:59:84:56:74:8c:f3:8f:54:20:
10:7b:ae:2d:19:cd:67:e8:10:ac:34:df:88:73:1c:3a:51:94:
90:cd:5a:67:11:1c:bc:b6:87:95:b9:8c:5d:bf:b9:77:d3:da:
a2:70:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:24:20 2025 by rpki-client