Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: Yb+Y0p8b4FHAKfiL03L2K9q6sbV2zpd4wCtotCqlCl8=
Subject key identifier: 3B:B7:54:7A:AC:6E:3E:2F:49:F7:62:74:9B:19:A5:71:9B:B1:22:69
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019767E0A8CC3968AE93D57A0EE5E6C65AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0666
Signing time: Fri 13 Jun 2025 06:01:05 +0000
Manifest this update: Fri 13 Jun 2025 06:01:05 +0000
Manifest next update: Sat 14 Jun 2025 06:01:05 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: Ap6kPs0j/StKZ3vahJ2Hju7Qw566a+paM0eCqsDz1QQ=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:a8:cc:39:68:ae:93:d5:7a:0e:e5:e6:c6:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jun 13 06:01:05 2025 GMT
Not After : Jun 14 06:01:05 2025 GMT
Subject: CN=3bb7547aac6e3e2f49f762749b19a5719bb12269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:e7:75:30:5d:5e:05:7d:2a:55:10:6d:5a:
9c:fe:a2:c0:3d:d0:22:75:9b:5e:33:2b:fa:fb:31:
37:22:2e:e4:e3:ba:77:0d:81:15:83:1f:88:b4:4b:
de:e5:d2:63:ba:07:6f:dc:a5:83:b2:20:82:59:ea:
90:b4:d9:e7:da:85:b9:4f:e0:f4:5d:19:b7:de:b1:
66:6f:f3:81:16:8d:53:e5:1d:81:63:7b:26:5b:c2:
23:ef:09:11:03:2f:c0:ec:58:6d:f4:c0:6d:80:7c:
17:8c:e3:2d:53:5f:10:de:86:63:46:cf:67:e4:df:
ae:f8:6f:14:47:98:c0:0c:61:a9:e1:21:b4:03:72:
1b:db:aa:9b:8e:f6:3b:37:2a:0e:8a:68:6d:a6:18:
e5:d6:a7:ec:d6:c3:83:3f:91:c0:50:25:61:31:f6:
ef:b5:a7:6a:80:8f:92:2e:e2:b5:0b:75:6e:46:b9:
14:40:c8:19:2b:8a:9f:48:89:f7:51:2d:b9:14:d5:
8a:2c:82:14:63:66:c3:03:93:2b:95:04:98:d6:2e:
fb:f2:9d:31:a8:21:20:38:fe:3f:05:71:53:8f:0d:
d6:10:b6:8f:2a:7b:fb:c3:72:64:61:df:87:d2:3f:
b6:9a:98:b3:bd:fb:d8:92:c3:20:7e:37:97:7d:b0:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B7:54:7A:AC:6E:3E:2F:49:F7:62:74:9B:19:A5:71:9B:B1:22:69
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:82:37:9d:7e:56:09:2d:11:f8:f7:e7:7a:a9:60:b5:ac:10:
d0:76:32:a4:96:12:b3:70:5f:af:ea:b8:c2:66:89:c5:d3:df:
b9:35:08:0e:d5:a3:36:0a:22:17:ef:fb:d1:64:07:b0:79:34:
a4:73:08:3c:7c:86:08:75:df:04:ea:12:3a:44:fd:12:f7:e6:
fc:ba:21:8e:0c:9c:e4:8b:4e:8e:69:07:d2:fe:86:d8:30:c0:
78:23:d8:9c:a6:99:09:33:4d:bc:38:39:90:a8:78:2d:d7:06:
3a:e5:0e:e0:79:bd:5e:3c:fd:b6:1d:ac:2c:69:10:03:7b:a7:
3f:8a:63:a3:4a:2d:16:f3:0e:2f:90:fe:57:ce:39:cd:08:42:
39:33:ce:65:56:d6:13:86:82:44:96:65:63:d1:fd:33:fb:8f:
27:f5:cb:e3:0f:c3:97:83:5f:26:a9:30:a2:9e:5b:7e:32:12:
93:73:69:38:b7:e2:d1:4f:58:cb:1c:73:22:a4:3f:21:04:bd:
43:4d:36:23:e8:1d:47:07:78:84:c3:bb:47:1d:7f:60:0b:3f:
02:12:ef:4e:d1:ca:5e:92:9d:00:3f:05:c1:e2:93:5f:2e:c5:
fa:2a:b7:f2:43:c9:cf:2f:d3:57:b9:83:48:93:73:30:50:f9:
33:40:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:16:43 2025 by rpki-client