Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: sHbvS13a+eQokNRm+pVI0RebZmAD3fL0PpRfHEvkcqo=
Subject key identifier: 66:62:A2:C4:63:05:66:E4:3E:CA:2E:73:74:70:87:6C:DB:DF:94:81
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019747B0E6528B1AAB03601608813F329BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 12C9
Signing time: Sat 07 Jun 2025 00:01:04 +0000
Manifest this update: Sat 07 Jun 2025 00:01:04 +0000
Manifest next update: Sun 08 Jun 2025 00:01:04 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: goVx0bQBax4xX95oFh3xSUnWjfOJM2QZfy4I09qXojY=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:e6:52:8b:1a:ab:03:60:16:08:81:3f:32:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Jun 7 00:01:04 2025 GMT
Not After : Jun 8 00:01:04 2025 GMT
Subject: CN=6662a2c4630566e43eca2e737470876cdbdf9481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:bf:ce:72:5e:49:d0:74:90:11:81:83:63:
59:09:77:a3:2c:a4:6c:09:c4:a1:9e:7c:a2:72:8c:
54:89:d0:75:41:e5:80:71:c0:37:ab:e5:c5:03:ff:
25:b9:e6:bd:3e:7b:ed:e0:3e:47:0e:7f:3f:10:9e:
df:50:3c:8f:b2:0c:8a:6c:4b:08:29:1c:56:21:1c:
1a:e9:f3:a0:6a:f6:50:f5:80:d2:53:49:2e:a8:c5:
90:d3:b4:8f:87:b0:29:a8:e6:e4:db:e4:18:ec:07:
6b:82:66:d9:6b:46:51:a4:cb:60:4f:37:ff:08:c3:
eb:5c:19:67:0f:a8:71:5b:fa:7a:8c:cc:3a:74:95:
31:1b:fb:1a:ac:2c:1e:14:f8:70:6b:8a:53:2d:7c:
bb:13:8c:0d:81:71:09:dc:59:a7:70:67:60:bb:eb:
ae:15:43:44:80:98:eb:d9:10:ef:1e:cd:26:28:d5:
c9:a6:ef:54:47:2d:55:e0:de:e0:0a:d3:bc:5e:c9:
df:01:37:33:09:25:d1:56:c9:2a:15:e2:3f:54:96:
5f:6c:75:a5:c6:48:4d:9a:0a:f7:17:fb:6c:90:6c:
e3:d4:fe:a2:35:99:37:15:1a:79:16:26:17:78:92:
99:f2:ed:d8:4a:52:a2:65:87:93:1f:6c:35:3c:d9:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:A2:C4:63:05:66:E4:3E:CA:2E:73:74:70:87:6C:DB:DF:94:81
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6d:34:f9:6e:6c:cd:9f:27:51:b4:3a:58:c6:e2:26:9a:58:
da:ee:2e:ea:99:a4:78:d3:dd:c3:76:6b:e8:41:33:10:42:19:
9c:9f:ff:0f:c8:7c:90:ec:00:df:a4:33:4a:55:25:51:ad:8c:
55:60:8b:a4:67:c1:84:eb:a5:54:90:b6:b2:6c:e9:70:de:80:
3f:af:71:76:c4:b9:83:9f:6b:7a:fc:08:e7:db:f1:d5:5b:3d:
ed:c9:5a:22:a2:6b:7b:a0:b3:c9:22:ea:cc:bf:3c:b2:fc:e1:
30:1c:4f:4f:19:b5:8d:61:3d:54:5a:2c:d1:7e:b1:2c:7a:7d:
68:53:d4:40:de:91:f5:cc:70:5d:9c:65:60:b2:24:81:0c:50:
e1:e6:f9:11:68:5c:a2:6a:c0:7b:98:06:37:8f:d2:be:b8:5e:
b7:43:ec:a1:e9:77:70:b5:7e:c8:72:c6:39:08:bb:08:a4:0a:
44:91:45:86:66:14:9f:80:ac:cf:6e:12:c6:38:ae:dc:77:54:
f8:ac:a5:04:11:99:f1:17:91:a5:31:78:01:84:55:e3:59:7e:
56:73:8e:e0:ae:25:1e:50:58:46:42:22:a0:9f:2e:4a:07:31:
a1:b9:d6:b5:fb:57:58:43:75:19:2f:a2:1d:28:af:b9:d1:0f:
9d:13:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:56:43 2025 by rpki-client