Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: XeNv04TjRVgnCR3W7RNoavstB/XyCu0Y8HHTCd71VFI=
Subject key identifier: A1:C3:39:F3:C3:F6:3A:97:D8:E5:D1:FE:96:79:2F:1E:D5:97:B5:D2
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 019747E7DD5C122567E173606E46C54E6EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 1552
Signing time: Sat 07 Jun 2025 01:01:07 +0000
Manifest this update: Sat 07 Jun 2025 01:01:07 +0000
Manifest next update: Sun 08 Jun 2025 01:01:07 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: 6aePI6XO4ysYD5cGR8BHbzg4Uyr7n1hAeUBRbZiYgPg=)
2: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (hash: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:dd:5c:12:25:67:e1:73:60:6e:46:c5:4e:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Jun 7 01:01:07 2025 GMT
Not After : Jun 8 01:01:07 2025 GMT
Subject: CN=a1c339f3c3f63a97d8e5d1fe96792f1ed597b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:25:06:20:4b:43:23:b3:59:a2:09:fe:62:
96:5c:9f:7b:89:d3:fa:86:88:62:89:da:d3:75:ab:
67:9f:57:de:97:e5:00:7a:a2:ac:c1:68:b2:91:91:
6a:a0:6e:80:2a:55:f6:39:c2:e7:7e:b7:ff:74:9d:
f7:1f:44:0b:06:ef:e1:21:bc:c0:a0:d7:15:de:e5:
07:ab:e0:93:62:22:9b:4d:fa:5d:7c:e8:89:0f:48:
fa:fe:1e:62:a0:e3:2d:ae:5b:e0:e4:c0:99:a0:74:
48:d9:86:af:2d:70:49:95:fd:74:cd:35:42:e9:b8:
50:26:ae:85:ca:4a:8f:67:18:bd:0b:c4:9e:de:20:
15:8f:10:b0:21:e3:b5:ca:5f:0a:93:74:33:90:d5:
33:96:87:25:bb:5b:85:f7:b9:b0:73:0f:51:58:37:
13:5f:5d:4f:b7:70:9e:0f:ec:9d:54:57:b5:3a:de:
45:f7:4c:01:c1:97:fa:a2:86:10:b6:c9:1a:9e:da:
d6:5d:a7:82:eb:6e:a1:ef:1a:79:69:07:e7:55:7f:
f4:2c:8a:5c:20:6f:8f:a3:b8:83:36:6c:05:01:f3:
26:b5:7f:49:ed:ea:43:db:41:98:4f:20:b4:a6:5b:
60:a5:3e:45:e8:e2:9d:93:7d:91:8a:3f:cf:c9:73:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:39:F3:C3:F6:3A:97:D8:E5:D1:FE:96:79:2F:1E:D5:97:B5:D2
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:20:6c:a2:49:c9:56:06:a4:c2:c6:49:51:5b:e2:27:9c:
ed:85:81:fe:61:8f:82:f7:55:d7:01:52:f4:16:9d:13:8c:b0:
4a:53:41:bb:7b:1b:05:5c:e0:af:20:ac:04:ef:b1:65:34:f5:
30:c8:9a:c5:ac:ab:30:32:19:49:cf:65:41:40:7d:c3:07:72:
13:f7:87:01:14:12:2d:78:83:82:a3:b2:f1:76:55:0f:af:75:
93:cf:0c:d5:7f:2d:48:cf:38:d5:24:97:60:1b:be:82:e8:b7:
fe:c8:ab:ee:01:75:c1:90:f6:3a:e1:c5:e0:aa:e1:85:a6:95:
88:1a:3f:e6:e3:61:57:16:7a:d2:7f:0d:22:88:eb:95:06:2e:
d2:b2:46:ee:d6:0d:90:0a:7d:b7:b5:03:f4:62:65:42:cd:a4:
dc:09:e6:8e:94:95:12:38:8a:43:fa:0a:3f:00:2e:f5:e5:d4:
13:14:c2:c9:57:7b:64:66:6f:c5:17:79:53:f0:1c:79:ba:07:
b7:0b:69:15:37:c1:b5:ba:a3:b2:89:62:88:18:92:fe:fb:48:
60:b2:f9:11:12:99:35:b3:4c:e8:be:19:7d:8b:b9:08:5a:6a:
19:6c:ff:ff:ad:f8:62:f1:4a:d2:2e:b0:6f:19:5f:56:11:a1:
ea:50:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:50 2025 by rpki-client