Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: Ok/Y+rcM7vAojwCIMGqTW8YrkfHHqWEfJ8wVXV3TIho=
Subject key identifier: 78:2E:ED:82:9C:B8:28:87:1E:CE:F0:86:1A:EE:AF:CC:CA:2A:F8:61
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01974DB29CE46CE2BD1CB521D82A40A03D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0739
Signing time: Sun 08 Jun 2025 04:00:40 +0000
Manifest this update: Sun 08 Jun 2025 04:00:40 +0000
Manifest next update: Mon 09 Jun 2025 04:00:40 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: orzdkFmNbIJFooxDX7kmRJ4dOjheloXsUsyiew2xTvQ=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:9c:e4:6c:e2:bd:1c:b5:21:d8:2a:40:a0:3d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Jun 8 04:00:40 2025 GMT
Not After : Jun 9 04:00:40 2025 GMT
Subject: CN=782eed829cb828871ecef0861aeeafccca2af861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:44:21:8f:c3:2d:b3:e1:7b:b8:20:9b:96:
d1:6f:18:83:60:37:38:1d:e0:7d:64:38:5d:72:41:
4e:d9:a5:70:b7:c4:87:a5:15:34:01:fa:74:16:db:
67:0f:10:fb:dd:b0:3e:35:62:e3:7d:c0:e9:80:82:
d4:9a:b5:24:09:d7:91:26:d8:c6:f8:2c:ed:c6:16:
94:95:43:8c:1b:97:f6:84:76:a2:b4:76:91:b9:50:
50:fe:95:71:1a:1b:0a:53:70:42:b7:ff:60:b6:96:
a8:f6:d2:0b:fe:25:f7:3c:78:79:83:f4:96:18:c3:
5e:92:ba:8b:4b:b1:44:0c:8b:da:d9:51:40:4b:f3:
e0:e1:1d:53:b8:c5:a5:8a:0e:a3:b5:2c:1f:2a:7d:
f0:07:77:e8:95:59:f5:78:60:52:63:57:02:cf:7c:
b9:86:e6:95:d1:7f:3d:b1:dc:f1:1d:ca:4d:bd:a0:
db:b5:ac:19:6c:42:5c:7e:7a:92:4e:74:54:b4:1b:
68:b4:47:fa:14:7f:c0:49:41:00:83:dd:8d:68:67:
aa:3a:97:d8:46:60:6a:c3:6d:e0:f3:59:a2:5a:ef:
1b:64:88:fc:84:29:5a:4a:ce:9c:90:71:b9:47:8d:
43:ef:14:60:92:44:c6:09:f6:ca:a4:9e:bb:d4:76:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:ED:82:9C:B8:28:87:1E:CE:F0:86:1A:EE:AF:CC:CA:2A:F8:61
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:51:b2:e9:66:26:b7:42:f8:eb:1e:80:6e:64:f2:d3:88:
d8:6f:91:7e:11:9a:2b:6c:67:e7:ea:9a:1c:b8:ed:d2:73:b3:
ff:33:87:5b:6e:49:fe:c3:46:30:7c:1a:57:9b:1b:6d:2c:b3:
01:95:73:41:c9:00:bc:ef:51:77:bb:0e:51:d9:77:f5:70:1c:
bf:2f:6a:5f:03:bb:8c:d1:a0:3c:ae:f6:c0:d7:7d:d0:1d:6f:
3d:60:42:f7:68:1f:53:66:af:36:38:96:94:78:c7:b0:3c:7b:
2b:8f:ce:6f:bc:0a:70:b4:8e:be:9c:c8:3e:ce:c2:a8:75:b4:
14:cd:ce:32:94:67:98:b3:2c:43:08:16:8f:9d:ca:19:0b:fa:
84:6b:e2:ba:d0:a8:d9:70:0c:17:dd:e1:aa:d0:51:11:64:84:
52:c9:b2:33:e4:72:03:ae:e9:43:8b:ba:f6:2a:55:8d:3c:da:
9a:38:3d:8b:1d:cc:6e:19:9c:36:af:62:d0:f1:7a:50:7b:df:
26:94:84:81:ae:bb:03:9b:38:d0:80:df:4d:c6:85:47:b9:fb:
27:83:49:2e:f3:7c:5d:c0:8a:81:7c:b2:e7:bc:a9:7a:65:8e:
1a:c9:cd:52:76:34:d3:29:7e:d5:f3:18:c3:82:da:d8:b0:9a:
3a:f5:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:11 2025 by rpki-client