Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: hQviRHZnyHKdroktvsqc3XD5TG+5q182vL9UhDaDI6g=
Subject key identifier: A1:83:B2:D2:DB:0C:7C:22:22:D4:93:A7:F2:60:D6:C9:17:A4:21:04
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 019758003DB97EFB12ED1D2C37A46455A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 0198
Signing time: Tue 10 Jun 2025 04:01:40 +0000
Manifest this update: Tue 10 Jun 2025 04:01:40 +0000
Manifest next update: Wed 11 Jun 2025 04:01:40 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: lrg+KWQDYXDPVvWoAMl9AbqeuDwWBCFEkNokIcpDETg=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:3d:b9:7e:fb:12:ed:1d:2c:37:a4:64:55:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Jun 10 04:01:40 2025 GMT
Not After : Jun 11 04:01:40 2025 GMT
Subject: CN=a183b2d2db0c7c2222d493a7f260d6c917a42104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:0d:ec:93:35:0d:5d:b8:78:a5:c3:b0:81:
21:34:13:00:9f:94:64:e8:10:a4:d9:19:a8:01:43:
12:b9:ef:3e:29:40:03:25:c4:fa:2b:ed:b4:dc:bd:
56:71:94:a0:7f:20:b0:cc:28:15:5e:a1:f5:7f:33:
5b:03:1e:d8:07:40:8e:83:0a:f5:90:51:58:ff:5b:
bc:53:9d:6b:c0:11:65:fe:60:75:6d:9f:89:48:48:
c6:96:37:74:ab:50:07:1f:ea:29:15:2a:e2:dc:5f:
f6:dd:a0:e8:c6:5d:16:9b:2f:80:fb:70:ce:d1:1b:
b9:de:fc:4b:a3:06:2f:2e:93:af:de:f3:5c:57:ee:
fc:bd:b0:05:fd:8c:ab:29:12:40:49:d7:0b:54:4b:
0c:92:4a:00:77:a0:be:cf:ce:3f:8d:be:3c:11:a9:
58:b0:6a:72:f4:9a:68:f4:5e:39:d5:82:27:38:b1:
40:6a:40:77:92:5b:01:38:7a:76:0c:d9:ed:d3:70:
ca:7a:19:23:4c:59:15:9c:90:bc:2e:18:31:eb:8d:
3d:d1:c0:49:a7:93:49:35:ac:82:ec:e7:3f:70:b2:
48:ca:a8:6d:55:fb:28:f3:64:6b:e4:ce:ba:15:45:
37:62:b1:0e:5a:a0:16:2f:a4:2d:4a:df:ce:f0:7e:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:83:B2:D2:DB:0C:7C:22:22:D4:93:A7:F2:60:D6:C9:17:A4:21:04
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:34:63:99:a9:27:5c:5a:70:04:5b:48:d1:fb:52:f7:86:
10:b0:e5:08:b0:ef:df:16:2f:b3:6b:97:d0:87:05:ae:70:57:
aa:b6:c6:98:84:db:fa:6c:b7:df:30:9f:ac:df:61:b1:dc:93:
36:2a:2a:26:53:18:d0:dd:42:7e:83:26:42:bc:95:91:45:69:
a0:56:f5:85:aa:4f:4f:b5:d8:55:39:08:80:6a:e1:e6:01:b8:
1a:c0:a6:02:70:22:bc:ac:c5:10:74:9a:b1:df:10:5e:b6:ec:
8f:9d:56:c9:82:53:19:24:a2:18:9e:2e:a1:42:b1:30:ab:fa:
44:d1:9b:e5:88:47:ed:2f:88:b9:45:fa:06:6f:e2:01:12:59:
ca:9a:aa:ce:e6:91:09:59:5e:59:db:a1:9d:34:5d:b5:26:19:
e4:b6:8c:c8:8c:81:e0:9f:a5:3b:f5:1d:54:af:91:eb:cf:d4:
71:d0:8c:b5:90:0e:b1:d6:b3:78:21:3c:60:a0:62:84:c3:cd:
42:52:22:d8:5a:74:9a:c5:54:a0:8d:9a:4d:72:b5:69:a3:3b:
57:37:9d:1a:60:25:9b:3c:49:fc:6d:14:67:0e:ff:de:48:29:
1e:14:ee:49:4a:9e:17:6d:4f:13:80:e6:1b:15:12:dd:c8:08:
03:f0:ad:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:48:29 2025 by rpki-client