Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: cfhZGxrA4GRmTx+e9som4gbxM5PpX6MDUHg1vjRfHWo=
Subject key identifier: 7C:E2:A6:1E:A7:D8:8D:FB:9A:B8:84:91:2A:E6:6B:9A:1A:03:53:0B
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01974E207DBB67A34FC5F138A527EFEB4252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 080A
Signing time: Sun 08 Jun 2025 06:00:41 +0000
Manifest this update: Sun 08 Jun 2025 06:00:41 +0000
Manifest next update: Mon 09 Jun 2025 06:00:41 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: qJvryGov2KaCZwmPWhe7yqrYL0gmDSUxDQDJXdb3DWA=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:7d:bb:67:a3:4f:c5:f1:38:a5:27:ef:eb:42:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jun 8 06:00:41 2025 GMT
Not After : Jun 9 06:00:41 2025 GMT
Subject: CN=7ce2a61ea7d88dfb9ab884912ae66b9a1a03530b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:e9:9a:d8:e5:02:05:03:b9:dd:06:ab:20:
85:17:e2:ca:a9:5e:f8:21:83:8e:38:68:3a:94:77:
a7:5f:f9:8a:ab:14:1e:f9:d9:08:62:b9:4d:28:b1:
ab:97:fd:b0:a3:f3:28:b5:e8:9b:9e:87:3c:de:9d:
2e:6c:63:b6:e6:c9:42:a3:15:d2:a2:32:eb:54:a2:
2a:1d:75:d4:5b:ca:a5:69:c5:04:c9:81:01:b2:78:
70:e4:66:40:de:7f:85:c3:31:42:4a:66:5a:dd:ab:
7f:71:98:fb:59:c8:08:78:0c:ad:a2:7f:b9:57:5f:
4e:34:14:cd:bb:7b:48:59:c9:19:ac:89:c4:76:a1:
27:5a:cb:a9:09:40:89:35:ba:0a:4b:da:f5:10:95:
de:31:8e:c3:69:57:4e:5c:6c:7b:c1:8d:30:b5:06:
16:47:bc:e5:a2:fb:cd:00:c3:bc:00:a0:af:1d:13:
f2:c7:47:11:6e:90:da:24:1b:74:90:2e:6b:53:05:
df:d7:11:bb:e6:e8:89:d3:40:b5:7c:20:9e:73:5f:
d0:10:17:68:fb:ee:98:d0:c7:e9:5d:02:12:f3:9b:
c8:70:3e:44:81:66:46:38:d4:a0:94:87:b5:0b:38:
5a:7c:05:1d:92:77:a3:a7:b0:ca:51:d5:35:b0:f4:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:A6:1E:A7:D8:8D:FB:9A:B8:84:91:2A:E6:6B:9A:1A:03:53:0B
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0e:fc:d6:fd:b5:43:d4:a8:32:d6:d8:e0:c3:99:c3:65:69:
92:97:1d:c2:3d:ac:dc:22:6c:06:a3:fb:b4:0d:c8:4d:d7:2b:
c3:e3:0b:72:ea:a3:98:f4:0c:be:dc:af:2e:21:71:d2:73:54:
61:ce:c5:9e:fb:c7:8a:a0:16:e6:65:4f:73:3d:78:ae:29:5c:
82:aa:bb:92:c0:68:a0:01:05:97:a2:70:65:f8:df:dc:d1:7b:
61:cd:4e:b4:d1:c8:58:94:28:66:aa:90:27:2d:63:44:a8:23:
b7:c4:7d:77:33:0b:d2:e8:d3:92:0a:04:e2:25:2d:1b:55:26:
40:09:56:cd:1e:bc:9e:ae:fb:e3:b1:71:22:2d:9f:f6:9f:57:
41:e6:32:53:80:7f:81:6b:7f:42:f4:fd:d6:4a:1f:d1:2e:37:
b1:cc:84:cc:c6:b4:17:93:ed:c9:ca:9e:26:e6:4d:e2:74:e2:
b4:98:59:84:46:b2:62:fc:e9:75:4a:96:74:80:74:e1:fa:7e:
50:e3:d2:53:f0:c8:40:c5:62:e2:cd:36:53:43:df:69:d9:f0:
82:98:ad:b8:2f:e7:70:db:95:1a:5e:2e:e9:e3:68:99:3e:b4:
dc:59:ef:0f:6c:aa:3b:52:1f:94:00:ea:86:7e:2a:b4:67:4c:
87:b4:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:13:21 2025 by rpki-client