Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: KPfr55ZwrGn2XY7+Vl16OdMjxxdtnyUbwAe2MJCwnss=
Subject key identifier: 3B:C6:F5:BD:AE:87:6B:EA:92:7F:2A:A9:A5:BB:15:38:C8:3D:3E:A1
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 01976215016376DD8B82DAB149EDC32BE8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0663
Signing time: Thu 12 Jun 2025 03:00:33 +0000
Manifest this update: Thu 12 Jun 2025 03:00:33 +0000
Manifest next update: Fri 13 Jun 2025 03:00:33 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: M23HhelYGRJyQKzF8Nf/MyElmUHA22yxWsje08vwS2k=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:01:63:76:dd:8b:82:da:b1:49:ed:c3:2b:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jun 12 03:00:33 2025 GMT
Not After : Jun 13 03:00:33 2025 GMT
Subject: CN=3bc6f5bdae876bea927f2aa9a5bb1538c83d3ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:2d:fc:66:32:2a:d8:3f:e2:2f:b5:0b:1c:
66:56:78:f2:60:56:fc:09:18:86:a3:29:e6:5c:7d:
04:f9:8b:b8:0e:a7:f6:11:b8:19:b5:ca:55:7a:ab:
9e:52:5d:fc:c8:6d:89:c4:bc:5e:64:58:2f:95:89:
95:78:f0:72:7d:b7:5c:86:d7:ad:7a:43:2f:b0:4a:
59:f5:24:48:f1:d4:d4:6a:1b:05:41:5e:2e:a8:6d:
67:77:8d:64:c8:4f:13:60:15:9b:2f:b5:dd:b8:6e:
ef:03:39:b5:93:7b:74:ce:d9:25:7c:0b:4a:e8:f7:
68:85:09:73:ec:39:ee:2d:a8:51:2e:3a:1f:e6:51:
c6:a0:3c:c5:8c:70:f8:25:31:12:af:a7:15:0a:45:
ac:fd:7a:31:8f:36:26:e5:7b:57:6f:2d:25:66:51:
c1:89:b7:22:46:10:9b:f3:fc:cf:20:5a:7c:ec:29:
26:44:0a:3e:c9:4c:c9:a5:c8:76:73:04:fd:28:83:
56:37:71:91:76:b4:34:04:85:9d:9d:a9:0f:24:91:
2a:69:f9:d1:05:71:5a:b4:3f:ff:85:34:d5:6c:59:
41:7a:2c:73:99:44:d7:28:1f:e0:d4:71:21:de:96:
6b:2a:ae:b3:d9:76:bd:81:67:08:6f:3c:35:0d:fa:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C6:F5:BD:AE:87:6B:EA:92:7F:2A:A9:A5:BB:15:38:C8:3D:3E:A1
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9e:00:49:b0:85:70:73:0b:fb:89:ae:f2:8c:3c:df:b4:fc:
c0:56:1d:c1:b6:69:6e:7b:21:2f:a6:36:31:cc:5d:6a:85:9f:
41:e8:06:12:f0:8a:23:b7:4d:ce:26:f9:9a:24:36:63:22:80:
0c:4e:27:b6:ef:1f:0c:88:0d:89:fa:e8:64:ee:32:ca:d3:1b:
2a:29:2a:08:f7:6b:26:ef:35:ae:a1:d6:2d:c7:87:05:7f:d8:
09:02:da:b2:66:30:54:57:bb:29:f6:98:1c:f1:f8:02:17:8a:
57:0a:ff:c3:c7:be:64:f7:7f:bb:7b:a5:d6:f0:1b:c5:bd:a5:
62:e5:05:79:db:43:1b:1d:b1:61:17:aa:b6:38:e3:f0:b0:da:
e7:65:51:a3:08:4f:4f:93:22:99:8c:45:d6:70:98:9c:50:4e:
76:12:43:23:26:21:ff:f7:cb:83:d5:9d:0f:4a:38:8a:5b:33:
09:6d:e0:af:d2:1f:bd:64:77:d6:b5:4c:f0:0a:8b:aa:7f:d6:
03:8a:77:4b:f5:af:69:01:9d:7e:08:32:25:f9:74:7c:02:d8:
7c:7e:8a:18:85:fc:4e:f5:6e:1f:57:a2:e4:86:ce:a9:b5:ec:
e8:88:45:a2:c3:52:28:57:1f:f1:30:2a:0d:a0:9f:53:94:56:
ca:05:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:41:19 2025 by rpki-client