Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: 8DKzpkxDoNldB3S4O3cccjNxEjMlgOARdTZIdC9gB78=
Subject key identifier: B3:4D:3F:C4:24:9E:01:D6:1D:AD:0A:AD:09:82:8D:AA:01:1F:6F:4C
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019922C372F08B274C71439B171782AE4591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 13BF
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: Ps60KvTQ/kqFXAd7E9q9+BTDWPzaDNHb29Q13ll4Bxc=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:72:f0:8b:27:4c:71:43:9b:17:17:82:ae:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=b34d3fc4249e01d61dad0aad09828daa011f6f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:14:9e:f6:a4:5d:2b:32:89:04:f6:f8:79:23:
03:f5:70:17:e5:39:9a:4b:56:6f:3c:b7:0c:c9:5a:
79:79:3e:bc:e8:16:9d:40:e0:87:f1:d2:1e:40:80:
c2:14:3c:c9:dc:a1:a1:f7:a1:c1:81:38:3f:c6:27:
f4:22:c3:27:02:91:fe:0b:21:75:53:a1:a4:55:04:
a3:d2:72:ba:f2:fa:e1:5e:39:26:d4:36:b0:fa:55:
e7:c5:cd:50:1e:f9:fb:69:76:89:ae:0c:ab:49:c9:
86:2d:9c:da:87:b2:67:49:c1:af:56:ab:71:f3:f2:
84:a8:8f:c0:d2:c9:80:bc:a9:79:38:e8:4d:c9:a5:
5f:c0:58:87:2f:6e:78:38:65:24:b8:15:b7:41:98:
8a:cb:82:54:ca:1a:8e:cc:f9:ed:52:00:d8:64:37:
75:2f:d8:b5:a8:9a:50:09:a3:a9:1e:0b:47:5b:57:
fb:9a:1e:99:bd:6c:74:23:8d:8b:61:d9:69:ad:ac:
c7:35:74:bd:f3:08:96:d6:de:98:fd:b7:1e:2d:88:
b6:54:32:49:da:21:27:96:09:ec:51:ac:97:d6:c0:
ef:d0:60:d8:ae:09:14:b6:6c:56:99:30:09:68:5d:
a1:8d:22:f5:1d:26:f2:fe:8c:d2:3c:26:c7:e5:a9:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:3F:C4:24:9E:01:D6:1D:AD:0A:AD:09:82:8D:AA:01:1F:6F:4C
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:3d:f5:1d:9b:fd:76:08:2d:c3:82:97:4e:5d:dd:b0:18:
50:12:8b:3c:8d:1e:73:03:93:ee:48:e8:c6:e5:ee:ee:e8:00:
36:04:05:87:59:15:84:9f:c7:dd:c8:70:92:b1:70:65:eb:ca:
29:71:ce:ba:10:34:f9:72:03:d1:d7:f4:4a:03:57:13:50:f4:
7a:82:57:1c:08:18:f9:21:1d:6a:48:02:e7:4c:88:3c:af:6b:
80:6a:4e:88:a5:44:e5:5c:c8:1e:89:51:5d:5d:89:12:8d:8a:
23:7f:ff:b9:01:75:b9:b0:7d:e7:07:3e:77:94:65:e8:bc:47:
c6:db:2e:95:9b:d6:f0:27:69:49:1e:0c:30:3c:28:1d:eb:07:
ca:7e:55:4c:6d:e1:2c:48:0f:de:28:4c:d9:36:99:20:d0:48:
d6:87:f0:f7:fb:19:1b:af:9c:53:10:59:c6:27:d0:5c:96:57:
8a:b4:6e:b5:8a:06:c4:07:87:c2:17:db:b5:73:ab:77:27:93:
35:33:00:59:53:6c:08:19:bc:be:5f:df:e6:dc:3b:cf:b8:17:
1a:4b:07:ca:38:f0:94:13:67:c8:49:35:b8:8b:8f:9a:16:3c:
fa:7c:df:36:54:aa:72:c0:77:4f:64:1f:14:27:94:37:21:ec:
f8:42:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:39 2025 by rpki-client