Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: BYkjw38iwHkhI/+5Nuzvw5OM0YkF88XwyKZ07UyGkMc=
Subject key identifier: 5C:3A:81:1A:9A:15:66:18:A9:FC:1B:F0:8C:E5:B5:14:41:FC:CA:71
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0197542377CA04C897552EE11445D6A713ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 0196
Signing time: Mon 09 Jun 2025 10:01:39 +0000
Manifest this update: Mon 09 Jun 2025 10:01:39 +0000
Manifest next update: Tue 10 Jun 2025 10:01:39 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: b3gqjR3/wJXxGMSmVAROeBJDGCs/KrkHo3/ViLvU/Ps=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:77:ca:04:c8:97:55:2e:e1:14:45:d6:a7:13:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Jun 9 10:01:39 2025 GMT
Not After : Jun 10 10:01:39 2025 GMT
Subject: CN=5c3a811a9a156618a9fc1bf08ce5b51441fcca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:37:c6:88:d7:92:0a:a6:e9:e9:00:09:16:
0d:07:84:08:9c:15:5c:3a:41:96:46:18:eb:9c:19:
2c:4d:9f:68:be:52:f1:a5:f2:71:1b:ba:43:6f:fe:
0c:aa:46:fe:35:00:25:48:2e:e8:7b:55:37:ee:c4:
a1:0f:b9:06:82:6a:d0:ec:86:7f:1e:9b:c5:4b:74:
7f:61:06:15:61:7e:5d:a9:51:59:72:96:cb:bf:7b:
14:5e:cc:0a:20:d6:31:86:ee:a5:6a:e4:b5:5e:86:
d5:5c:be:a9:7a:de:39:bd:e8:03:5b:fa:03:02:01:
33:43:98:6d:ca:60:f5:a2:3e:95:56:d0:e6:cc:2f:
3b:2a:e3:16:00:bb:3b:f1:ff:42:46:82:ce:40:31:
41:29:da:17:6c:ae:cf:11:a0:99:be:38:83:7a:99:
4f:fb:6b:63:87:6d:09:dc:e9:fa:75:f9:c7:7e:34:
f5:60:8a:bf:4d:24:2c:14:75:5d:14:ac:09:b2:aa:
cf:4f:23:1e:96:af:89:49:89:18:ee:69:b5:b6:e4:
f3:c8:f2:66:5d:0a:59:98:98:64:66:47:5b:a5:32:
ca:1a:5f:af:7a:dc:c8:91:aa:bf:c8:9c:1f:78:0a:
6f:1e:70:90:b1:d0:d8:34:0f:e1:92:ba:f1:13:9c:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:81:1A:9A:15:66:18:A9:FC:1B:F0:8C:E5:B5:14:41:FC:CA:71
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:f8:76:4b:ac:b3:b0:b2:47:52:05:dc:d5:01:33:00:18:
6f:bf:e6:bb:6a:a2:41:26:88:0f:87:c4:90:21:c6:08:29:26:
b3:28:2f:15:7b:cb:21:5d:ac:19:84:e0:bf:f3:93:0c:21:10:
8e:e3:bc:ed:bf:aa:2d:ae:44:18:ce:d1:44:fc:05:95:f8:6d:
a1:fc:99:f2:91:23:43:6e:a3:83:f0:a5:dd:27:36:40:30:67:
8a:35:00:d1:2c:d0:42:da:c9:24:51:8e:ba:46:77:aa:7b:41:
02:94:ac:ef:98:81:62:7a:7d:f5:45:88:87:f2:b6:13:7e:40:
49:24:b7:96:b5:71:9f:d3:bd:67:17:7c:d8:9d:c7:18:d7:e1:
1f:80:1a:ff:ef:69:c2:f8:dc:f1:a0:b6:e3:8c:2d:d4:90:90:
a2:34:ed:4c:13:cc:8e:1c:84:72:e1:9b:f6:22:ea:c3:be:43:
1d:cb:5a:ec:a0:a9:f4:a1:0e:a4:23:cc:91:7a:39:ad:af:64:
d4:fe:92:00:62:27:c5:dd:05:33:2f:6c:ee:de:5a:71:f5:14:
21:bc:87:72:c5:9a:78:af:d5:02:4e:d0:1f:65:40:95:7d:36:
ff:12:90:88:02:79:a2:79:75:11:ce:26:e4:91:61:4c:d3:96:
da:9f:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:39:45 2025 by rpki-client