Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: hXJ7CIXwUFQyFb5v6oWioNSIeGcFF3ahdalAs+IeooY=
Subject key identifier: A1:71:91:F1:D0:FA:C2:2B:74:3C:51:F8:86:59:E4:73:1F:97:93:E4
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 019748FA75A59D5D5C4D3E3583869C168A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 150B
Signing time: Sat 07 Jun 2025 06:01:02 +0000
Manifest this update: Sat 07 Jun 2025 06:01:02 +0000
Manifest next update: Sun 08 Jun 2025 06:01:02 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: GV960uCPJcJ/KLtTjBhlvCX+16kqUIHVQsJ4N07/lbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:75:a5:9d:5d:5c:4d:3e:35:83:86:9c:16:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Jun 7 06:01:02 2025 GMT
Not After : Jun 8 06:01:02 2025 GMT
Subject: CN=a17191f1d0fac22b743c51f88659e4731f9793e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:67:95:89:4d:9b:ac:6d:02:4f:c3:3a:c1:
5e:ff:3d:46:9d:1e:5f:15:32:09:3d:7a:5e:0d:d5:
93:87:11:e6:6f:ed:dc:06:f7:d1:3f:11:9d:9e:74:
59:a7:dc:a8:f9:d2:f6:70:92:53:a7:7d:57:49:0d:
01:6a:70:85:c6:12:1b:ba:d8:65:1d:c3:9a:b1:44:
4d:b1:f4:5d:55:5c:e0:e2:f0:bf:57:0a:bf:66:ea:
d5:77:e2:38:db:64:dd:5f:42:ab:21:bf:28:9c:83:
0d:3a:ac:be:d6:93:45:d1:43:86:8f:c2:1a:af:27:
1b:f9:de:7b:3d:22:1b:f2:b8:b6:42:9c:dd:2a:75:
9b:67:28:3f:a6:c4:90:43:05:95:a0:3d:5e:07:21:
f1:ad:db:90:59:ea:63:67:8f:66:46:f7:42:6c:c3:
30:6f:c9:bd:55:09:45:23:60:c1:45:59:49:36:18:
f9:51:4c:ce:85:73:e3:90:a0:19:66:63:42:2a:b3:
0e:19:5e:49:9c:1c:06:bb:7e:6a:dc:8b:e9:8f:c1:
3b:b5:a9:29:03:5a:75:7a:27:c7:b0:99:4b:54:21:
d8:5a:97:9d:5d:07:c6:2c:7b:43:5c:01:64:05:65:
91:ec:86:bb:75:dd:d7:0e:a2:5e:93:94:82:f8:eb:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:91:F1:D0:FA:C2:2B:74:3C:51:F8:86:59:E4:73:1F:97:93:E4
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:61:a2:b4:48:84:6f:f5:9a:06:ac:83:9a:89:b3:c0:f7:f3:
96:05:25:cc:26:0d:75:d0:1a:c7:44:94:4e:d5:f7:59:ba:01:
4d:c7:d8:10:2a:19:26:03:42:ca:0b:b2:53:93:b8:5b:49:b5:
9a:99:ad:d3:f2:6c:e8:08:ae:a6:e6:9a:8d:1a:c2:6f:27:00:
ad:c6:1e:63:c6:2e:68:b9:43:89:a1:5a:ee:b0:60:df:92:7b:
4b:af:62:1e:f5:00:ac:52:04:70:ce:12:1a:54:28:0c:0a:7d:
a2:7e:6e:f5:e3:64:44:9f:77:f1:f6:4f:c1:dc:36:89:ca:ca:
b7:33:9e:a4:7b:a9:f8:e0:90:0f:56:a3:8f:3b:08:0e:cf:53:
b7:a6:3e:28:6d:79:fe:b9:bc:86:3b:06:24:91:b1:18:84:e8:
81:27:c2:c3:ef:0b:a2:53:e5:ca:6f:1b:a7:ad:85:aa:f4:6e:
6d:b8:92:3b:72:53:5d:28:ff:dd:96:87:d1:2e:74:4d:74:21:
04:54:c0:29:ba:5b:f9:7f:69:0f:53:0b:47:fb:93:da:98:32:
e4:31:21:24:e7:23:09:88:e5:f3:35:a1:3c:72:5d:b2:95:02:
0a:cb:2c:fb:60:1e:88:69:1f:0a:67:cc:ee:f4:00:38:45:20:
73:67:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:33 2025 by rpki-client