Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: 6khB8P/D74W34Dtir4EKAqiH6YSDmDMgFwJBSix0J4Q=
Subject key identifier: 14:5D:CC:12:69:38:20:BA:A5:7E:EE:95:25:85:65:C2:42:BA:AB:AF
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 0197469DF155D06BD84272C1F2C474C5D759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 08D3
Signing time: Fri 06 Jun 2025 19:00:45 +0000
Manifest this update: Fri 06 Jun 2025 19:00:45 +0000
Manifest next update: Sat 07 Jun 2025 19:00:45 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: DeSEVSqdCqFDbE434f6xIpjS5O7P0+/cREIlmtDEz9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:f1:55:d0:6b:d8:42:72:c1:f2:c4:74:c5:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Jun 6 19:00:45 2025 GMT
Not After : Jun 7 19:00:45 2025 GMT
Subject: CN=145dcc12693820baa57eee95258565c242baabaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:3f:93:c0:fa:77:84:d2:67:cc:97:88:59:
a9:d2:b2:51:35:dd:0f:a8:82:67:64:63:52:73:db:
e4:72:a2:f6:33:8c:33:50:3b:56:98:29:ab:0a:7d:
ab:23:31:2c:02:a9:22:b0:82:55:c4:f6:8b:9f:10:
a1:03:36:61:c0:50:46:77:27:5a:43:8f:63:9b:7a:
14:5e:bb:08:a8:1a:f0:e8:a5:3d:e1:fd:64:15:9a:
e0:dd:b7:0c:90:b5:d8:ed:3e:55:69:d1:f1:e4:08:
b3:92:0f:3d:7e:6c:9b:5d:06:8e:c8:fb:2c:66:03:
37:0b:ed:1b:52:bf:19:6c:ef:1e:36:de:ec:b0:2f:
8d:e5:3e:b9:e8:56:3d:e0:d1:f9:35:07:e3:42:38:
a3:e3:72:94:2b:e3:ad:24:ff:02:58:c0:6e:19:68:
3f:7a:f2:b0:e4:90:fb:fd:d3:b2:26:d5:77:15:5c:
af:f3:ea:3e:64:5c:f3:aa:b5:cd:4c:94:56:80:84:
9a:57:45:8c:ec:9e:c6:f0:73:f0:3c:49:2f:94:a8:
d6:55:8d:38:52:45:56:41:9f:c1:fb:8e:4a:60:ec:
80:44:a4:dd:b0:2f:cf:99:7e:67:58:01:87:4a:75:
bb:85:59:8e:6d:ab:5e:39:14:4b:58:b5:b9:f4:f4:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5D:CC:12:69:38:20:BA:A5:7E:EE:95:25:85:65:C2:42:BA:AB:AF
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4b:c5:ea:80:bf:c9:3a:94:eb:f0:db:cd:08:0c:73:c1:71:
27:c7:7b:03:97:25:08:c6:15:20:73:65:79:df:90:5a:09:02:
d4:a2:77:db:86:13:4b:65:e8:07:69:5b:f2:c2:d0:58:38:e7:
7e:47:c3:cf:55:b6:29:1d:6c:52:b0:a0:d9:50:b5:f7:be:16:
8e:74:bb:90:46:e0:0a:96:90:d1:53:8c:12:5d:46:2c:8d:5f:
09:21:96:c3:dc:2c:e6:1e:a3:6b:b3:61:86:80:f8:2a:bc:e0:
1e:e3:59:84:0d:8a:36:40:9b:94:4f:6a:5a:aa:82:75:00:9e:
b3:b3:39:1b:cd:bb:ec:2c:83:12:51:aa:8c:9d:be:b7:52:0e:
f4:4f:97:34:04:0e:ba:ba:18:9a:c4:5e:0d:43:07:33:34:4d:
9f:49:52:d2:19:38:14:46:8c:1c:53:98:f8:2e:a2:9a:4b:f2:
6c:88:28:3b:ce:91:29:95:54:58:b7:a6:94:1f:6e:eb:40:9a:
f3:d8:02:38:72:f4:66:08:22:71:38:19:31:08:14:50:fd:17:
3c:3d:f2:5a:96:59:5f:44:e6:6c:cb:68:3b:61:72:da:20:80:
37:3b:19:42:b4:50:1d:4f:82:f2:b2:23:a1:f6:54:68:a9:a8:
a3:db:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:16 2025 by rpki-client