Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: swXuCaFTOsX8sKxyRjWbcPemZI/DiOb5PeI6XhCkCzM=
Subject key identifier: 6B:EB:F3:D9:42:CF:79:AB:45:F5:F6:A9:5E:B4:C2:F0:5E:FF:8E:97
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0198CBDD7373FE55A0326D77B65FBE89A11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0DE5
Signing time: Thu 21 Aug 2025 09:02:24 +0000
Manifest this update: Thu 21 Aug 2025 09:02:24 +0000
Manifest next update: Fri 22 Aug 2025 09:02:24 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: 4fTOtncQh8ZfvEfQJ5tm3MFx/qGF1A41y1F21bsyOxk=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:dd:73:73:fe:55:a0:32:6d:77:b6:5f:be:89:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Aug 21 09:02:24 2025 GMT
Not After : Aug 22 09:02:24 2025 GMT
Subject: CN=6bebf3d942cf79ab45f5f6a95eb4c2f05eff8e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:c8:e1:68:0e:46:51:26:5f:9f:e7:b8:cf:
95:1a:05:22:cd:ad:02:ee:ec:3a:cf:d5:d6:91:c4:
56:98:32:c7:cd:62:a9:a7:b9:8c:d7:ac:a8:7f:68:
5d:a6:04:15:93:cd:63:19:a6:dc:ab:98:ca:2f:a6:
e5:49:c9:4f:1e:ab:ae:a4:90:a6:ff:5a:9e:eb:15:
90:fb:76:d1:51:96:8d:08:cd:28:3f:bb:e3:4b:51:
28:de:3d:ca:1e:13:8e:59:60:55:b1:b6:1f:4b:93:
e0:1e:b7:53:82:d7:70:06:80:7b:57:52:6d:3d:3b:
da:9a:f5:5a:d3:1c:43:93:bb:7f:da:ee:ee:17:39:
e9:57:7e:4b:b7:ab:bc:c5:de:8a:bb:6d:11:d5:17:
26:e6:5c:c2:2d:e1:16:35:64:08:ff:b2:1c:ad:c2:
09:48:5c:2c:3a:2a:6f:c4:fb:95:9c:db:27:46:64:
85:ee:4b:22:23:51:f7:57:94:8f:c5:8f:a0:9c:db:
64:7a:c4:85:68:1d:c0:91:50:d1:8c:9a:75:ed:62:
78:89:c2:d8:35:24:0f:d4:c4:ad:88:8c:b6:6d:19:
47:2f:62:56:b7:ed:f4:fc:72:26:92:64:f4:38:d4:
20:5b:06:df:37:35:52:c1:a5:c8:5e:00:71:25:85:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:F3:D9:42:CF:79:AB:45:F5:F6:A9:5E:B4:C2:F0:5E:FF:8E:97
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fd:80:cb:2a:51:84:97:7d:c4:8f:dc:e8:75:0a:d3:0e:d2:
a3:a5:6d:ba:d9:95:ef:3b:cb:f8:43:ce:c7:36:b8:98:28:80:
88:91:ad:4a:1e:7d:66:44:04:60:9e:46:9f:d7:7d:9d:7b:5a:
da:7d:7c:e1:e2:b0:80:3f:a5:c4:07:b8:b5:f2:5b:d3:1d:d4:
04:2f:81:48:4e:bf:8a:14:76:d1:ff:fb:04:99:4f:ef:3c:9f:
8a:ed:56:a9:e7:19:bc:5e:3f:77:4e:d2:cb:0b:9f:48:d9:85:
15:53:6f:a3:e5:3a:42:7c:d2:9f:52:ab:9b:1a:65:4b:19:71:
fb:87:84:82:1f:7b:2f:3a:fb:aa:1e:94:85:bf:c7:51:95:6f:
05:b8:a5:f5:4e:95:84:53:9c:5f:89:d5:cf:9d:a6:a9:de:bc:
85:ac:d7:df:30:6b:e1:94:39:56:b0:20:20:5e:d7:45:d7:fa:
69:18:41:19:9f:06:41:1f:6b:0c:2a:3b:65:87:7d:5f:2c:35:
1f:43:7a:f2:c1:5c:96:da:30:34:fd:f3:e9:66:7d:7d:75:26:
27:5e:ca:f2:32:48:ae:fd:7f:7e:93:e5:9f:23:9e:f6:f3:2d:
fb:2b:ac:9d:32:81:b4:77:e8:e9:04:93:82:c2:2f:84:ed:55:
f5:32:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:57:43 2025 by rpki-client