Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: Bitp6nZm8La+yyveyqSB3kavSlcMbai+FhTuFZI5J7k=
Subject key identifier: B9:92:2D:53:EE:27:71:D5:A7:B2:BC:1C:3C:B8:07:BC:BC:F5:EE:BF
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019769CF0E9812200D5969F8B815D13AC606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0667
Signing time: Fri 13 Jun 2025 15:01:06 +0000
Manifest this update: Fri 13 Jun 2025 15:01:06 +0000
Manifest next update: Sat 14 Jun 2025 15:01:06 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: IBCXoI8TRqgyupNsP8B1dmNVU4YpxA58f/EuQDSy754=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:0e:98:12:20:0d:59:69:f8:b8:15:d1:3a:c6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jun 13 15:01:06 2025 GMT
Not After : Jun 14 15:01:06 2025 GMT
Subject: CN=b9922d53ee2771d5a7b2bc1c3cb807bcbcf5eebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:37:76:92:3d:26:b6:9f:ca:f9:02:53:f6:
30:c8:d8:b3:14:a8:94:ac:23:bb:0c:38:1d:dc:f6:
d9:98:c9:82:e1:78:29:3c:b0:4c:89:7b:e6:3a:d1:
4e:2c:37:36:79:63:3b:86:3b:4d:3b:ee:4c:1f:16:
0e:53:f3:86:7b:8a:a4:fe:fc:54:99:b4:9f:19:27:
96:69:0b:26:5e:6b:3c:95:10:d3:60:7b:b3:06:43:
88:ed:60:9d:a9:6c:51:20:87:7d:34:4b:19:68:42:
3f:b5:6c:6c:89:31:12:d9:a4:5d:d0:cd:67:ae:a8:
eb:f2:93:d6:65:01:d1:2d:69:d5:b3:71:11:f0:ac:
11:bb:3b:4d:a4:e6:7d:3d:a8:29:85:9f:19:70:a0:
ba:e0:11:42:28:d6:8b:d9:b8:c7:bd:76:79:9c:db:
62:d6:2b:56:9b:23:59:3f:ea:0a:75:53:2e:be:46:
ca:ac:fe:44:ba:7a:a2:c8:08:41:fe:b3:8c:97:60:
45:14:89:cf:b5:ba:72:bb:36:3f:5e:16:88:8b:8f:
e7:3b:f4:ab:f4:f7:04:ba:61:a7:9f:66:a4:52:85:
87:f1:38:92:22:dc:21:f1:10:cc:bf:d6:36:b8:10:
d4:96:20:aa:03:e4:cb:9e:13:03:b2:b8:3b:4c:21:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:92:2D:53:EE:27:71:D5:A7:B2:BC:1C:3C:B8:07:BC:BC:F5:EE:BF
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:32:0d:cf:bc:59:e0:29:19:13:6d:75:2e:62:78:ad:cb:e8:
a7:be:ce:28:2b:c8:a2:50:fc:a9:09:a7:7e:31:9a:20:18:45:
e5:f6:a7:b3:4b:be:69:13:1e:4d:8e:c2:f3:23:b1:46:85:b7:
69:47:17:c2:55:ca:14:ba:7d:f8:83:be:a3:3f:24:67:d2:53:
ab:20:72:6e:a7:22:c0:63:b1:74:91:27:f3:df:3c:ca:57:df:
aa:f4:3a:00:bd:a9:0a:96:80:ee:17:75:61:4e:ca:61:c7:ec:
e8:0f:18:fc:aa:24:2e:bf:df:33:30:d6:d9:dd:e7:7c:2d:d5:
c3:0a:90:2f:03:61:6f:4c:61:07:ff:19:26:ce:f6:72:71:b1:
71:c8:bd:13:02:7a:10:dc:66:70:75:95:5d:67:b2:13:22:5f:
a3:1a:73:c4:7e:cc:10:d1:80:84:18:06:b0:66:ce:c2:40:0b:
18:d2:39:72:a9:da:8d:ad:65:12:97:ee:04:01:89:c8:b3:20:
b9:08:1b:50:e5:5e:64:7b:05:db:22:0c:9b:f2:6b:42:df:24:
21:cf:f4:6e:3c:d2:03:e8:d9:67:b2:ed:9b:70:73:34:83:c6:
91:73:da:98:e2:65:aa:32:3d:86:ba:10:e2:09:ca:40:99:fa:
ef:06:81:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:08:34 2025 by rpki-client