Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: fU2xNY5ivrOyym8rnRxyD8YxbC6+ed5n6yHHE6kkA24=
Subject key identifier: EF:A4:FD:8E:A7:2F:CE:18:BC:6B:75:E0:1F:EE:7D:AA:39:45:D5:63
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 01974E8E32B193F31E9E3967E322CED64F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 08:00:31 +0000
Manifest this update: Sun 08 Jun 2025 08:00:31 +0000
Manifest next update: Mon 09 Jun 2025 08:00:31 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: C+MgoywuV5lL8ifJCg3S3sdm/+c6gbo3nRZ3R555lCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:32:b1:93:f3:1e:9e:39:67:e3:22:ce:d6:4f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jun 8 08:00:31 2025 GMT
Not After : Jun 9 08:00:31 2025 GMT
Subject: CN=efa4fd8ea72fce18bc6b75e01fee7daa3945d563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:ff:d3:87:b2:57:0c:be:59:37:d1:2c:bc:
d5:b3:44:8e:37:a1:16:81:6c:ee:d2:c1:74:25:9b:
45:9b:79:3b:3e:86:49:08:ef:7b:5c:c6:95:fb:0f:
6c:81:2d:57:c4:af:22:a1:78:79:d8:81:ad:26:3d:
0e:ac:4a:ae:8c:c7:36:24:71:48:16:59:b5:f5:fd:
02:e3:e1:15:e6:68:40:2e:63:80:15:36:68:28:13:
b9:d4:99:52:0f:89:c0:9b:e1:09:6b:e3:ee:66:4b:
91:fc:e7:ed:d5:9a:74:5b:29:2a:ae:bc:bb:bb:0d:
0a:b7:47:83:58:69:3a:06:a3:89:73:08:7e:2c:22:
3c:b9:d1:58:84:30:05:c4:76:66:54:8e:16:b8:a1:
01:29:d2:1f:9e:0f:84:4e:2b:23:63:2d:e1:b4:4b:
b2:e9:b8:b2:24:9d:1c:be:23:bc:58:ec:34:33:a3:
72:7c:7b:0b:37:f3:3d:a4:d9:e9:4b:b2:8e:78:25:
d4:64:b4:d3:ce:fe:5d:04:25:8d:aa:dc:3a:f1:d4:
50:74:0e:ff:58:87:eb:de:0b:14:a9:fb:e8:20:f7:
fd:74:a7:e0:1d:e5:fc:59:d0:41:d0:f9:8b:0c:72:
27:c2:d2:c4:8e:1f:55:d8:71:c0:f1:6b:e5:b9:7e:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:FD:8E:A7:2F:CE:18:BC:6B:75:E0:1F:EE:7D:AA:39:45:D5:63
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:99:36:c5:7a:0a:ba:ff:86:f8:ac:98:5f:79:80:6c:06:
da:99:11:4c:a6:d2:98:a2:d8:44:1a:48:ed:c8:f1:76:5c:44:
ea:b8:dc:1a:a6:30:fc:b8:cd:15:41:63:75:48:67:21:72:0a:
0c:ce:e5:c0:5b:b4:0d:c0:5a:c1:61:b8:cf:d2:c7:89:62:b6:
77:ca:94:ee:24:c0:eb:68:8b:3a:2e:44:fe:aa:42:2c:1c:5b:
78:31:a3:45:2a:dd:43:5b:b5:11:17:c7:7f:1b:50:13:11:7a:
65:c7:5a:72:9d:e4:97:8c:5b:96:1e:db:a5:9e:54:03:2b:23:
04:28:b9:01:ba:cd:3a:77:52:ff:bd:de:bf:94:7a:7e:b9:33:
06:fd:66:0f:f3:20:fc:81:7b:8b:e8:e6:19:a0:5b:03:fc:ed:
62:8e:ff:9c:5c:d6:a4:a2:24:35:9d:f5:d9:59:be:a2:9d:79:
77:ba:95:fc:19:e3:3d:2f:c2:23:17:40:f5:7a:99:07:c6:83:
32:2a:d3:ed:38:30:cb:bd:86:9a:ab:0c:3d:06:1e:e2:98:cb:
8d:77:82:77:24:7b:20:74:af:28:1f:27:43:ba:b5:9b:39:6f:
fa:9f:17:cf:c5:0e:59:40:62:70:06:b1:3f:bc:c1:10:be:f7:
28:72:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:06 2025 by rpki-client