Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: R+tKqE9z5fJ8ODRL+rlmEvK71ncKg/0zbShG8WK6Tzc=
Subject key identifier: 4E:C1:B8:3A:23:BF:20:9B:4E:64:56:2A:16:43:02:C9:E1:38:E2:78
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 01975C49CD82FC317131EB102687D7F41610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0660
Signing time: Wed 11 Jun 2025 00:00:29 +0000
Manifest this update: Wed 11 Jun 2025 00:00:29 +0000
Manifest next update: Thu 12 Jun 2025 00:00:29 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: CZmSPA0BiwbeGI3jbRPQlDYHlirRgiCkYfT4tSN5W2s=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:49:cd:82:fc:31:71:31:eb:10:26:87:d7:f4:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jun 11 00:00:29 2025 GMT
Not After : Jun 12 00:00:29 2025 GMT
Subject: CN=4ec1b83a23bf209b4e64562a164302c9e138e278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:ce:b6:28:92:0f:f9:78:19:55:bf:df:77:
02:c5:fb:15:71:1e:2f:ba:9a:bb:2f:96:75:7a:4e:
49:96:5f:ef:0e:23:d4:da:58:7a:46:cc:83:ac:94:
b5:b9:28:8b:be:e0:cd:b8:cc:05:9f:fa:33:08:3b:
17:21:47:b2:c0:0f:ab:35:fb:a3:bb:2d:b2:dc:36:
d2:9a:b3:b1:f6:ed:a0:ee:12:ec:a6:ba:65:34:bd:
d7:3b:c2:b4:86:7d:f2:15:b4:49:05:49:b3:a0:1e:
4f:48:80:72:dc:45:73:d1:72:f5:7f:da:35:bc:7b:
48:92:de:77:38:a4:db:13:f1:4d:2c:75:e2:50:7d:
ab:86:f3:1b:36:d8:3d:05:12:59:f4:90:f9:ab:ef:
79:7a:1f:a5:1a:7e:dd:1e:4c:ad:b9:74:2e:2a:b9:
4f:fa:32:3a:cf:fe:e0:75:1f:ce:25:17:de:99:10:
2b:05:c9:e3:f2:e2:cf:ee:5d:c2:d8:d8:f9:cd:73:
76:73:9c:c4:97:a4:b2:95:85:f4:5d:b2:12:87:a3:
c3:74:03:29:d7:f9:86:49:24:e0:b5:8e:78:7a:9d:
61:cf:71:20:52:51:fd:7a:d6:db:e0:11:94:59:4e:
6b:94:fe:4c:6b:ad:6c:10:c9:76:c4:83:1d:68:22:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:B8:3A:23:BF:20:9B:4E:64:56:2A:16:43:02:C9:E1:38:E2:78
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6a:1c:c4:2a:05:0e:38:7b:13:e0:e1:de:ad:b9:25:45:ee:
94:cc:06:4d:71:47:26:0b:9c:c5:8a:55:c3:ed:d3:da:a8:50:
c2:3b:04:f4:8e:f0:41:c1:16:65:86:9b:3b:39:9f:5b:1a:54:
be:2a:53:d2:ff:80:6e:75:3b:fd:23:8b:6d:78:5d:77:41:e1:
81:fe:87:76:3b:b9:8c:ae:e7:97:64:18:67:dc:79:77:a1:a6:
13:5a:53:21:3a:84:df:71:d0:ce:b4:6e:3f:48:29:56:0c:55:
a7:fd:27:ec:71:7c:6f:78:5e:df:24:f1:b7:25:e2:ee:2a:3d:
95:8f:9a:da:2c:41:f4:8e:6e:ea:ab:ae:d5:08:68:f1:86:be:
5e:af:50:f2:78:2d:40:cf:a1:7a:54:b8:cd:50:83:59:89:0d:
86:4b:c8:6e:db:f4:80:7f:d8:e7:d3:ec:5e:89:d1:f9:2b:37:
06:4c:fb:4e:6f:d3:3d:19:14:80:07:31:f2:66:ca:6b:58:ca:
83:59:5e:5c:b1:8f:1e:d8:ad:f1:24:98:f5:8f:93:1d:6c:54:
94:2c:be:67:d0:86:a8:31:a7:2b:a1:37:81:4e:7c:80:48:62:
49:fc:ad:29:32:fa:38:5a:f4:2d:d9:51:bf:50:99:49:a4:a6:
a9:c1:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:37:23 2025 by rpki-client