Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: QeTUV1qGR4K6PsjNURGZW9JeSfwPQcMatgPjD8B6ooI=
Subject key identifier: 2E:AA:77:CF:E8:5A:99:93:C5:CA:5C:08:C1:62:73:CE:D8:F1:EB:79
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019747B093AC64FF716F7A235C484210F0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0D1C
Signing time: Sat 07 Jun 2025 00:00:43 +0000
Manifest this update: Sat 07 Jun 2025 00:00:43 +0000
Manifest next update: Sun 08 Jun 2025 00:00:43 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: d/mlbNj/aqmm6TFLv4Kuzj9MKQrVd/9MTsvCZXagxYY=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:93:ac:64:ff:71:6f:7a:23:5c:48:42:10:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jun 7 00:00:43 2025 GMT
Not After : Jun 8 00:00:43 2025 GMT
Subject: CN=2eaa77cfe85a9993c5ca5c08c16273ced8f1eb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:8e:8d:ff:74:0c:f9:d7:b6:ee:83:9c:7e:
fc:77:5e:06:8d:01:5e:d9:8d:22:ae:6d:f6:e5:30:
1b:d8:a6:5d:0b:e3:6a:23:bb:f5:91:36:84:be:59:
e5:f0:39:03:76:2b:6d:58:f5:b7:68:91:27:91:86:
8d:64:b1:f5:eb:d8:5c:24:f4:a5:f0:eb:0f:0f:43:
a9:ec:b4:b8:4f:ee:42:35:a8:2d:8e:c9:9e:e0:51:
5a:d8:dc:e7:3d:fd:bd:c1:63:76:f6:da:1b:4d:e8:
d0:a2:bc:83:f8:da:1c:19:e4:2a:5f:41:2e:2f:75:
3c:97:bd:7d:31:aa:6b:c3:59:24:51:f4:1e:8d:41:
be:83:62:a1:3a:b1:d1:aa:73:5d:fd:46:2e:c8:ef:
5f:60:d4:51:d8:a5:6f:cd:e2:8f:1d:21:20:b2:ff:
cb:e4:af:54:ff:0b:89:08:97:70:ec:d3:43:cb:3c:
ee:90:7c:40:12:7a:ab:cc:83:6a:14:61:2b:65:5b:
78:8d:7e:af:0b:6c:f3:ea:ef:e2:3c:66:c0:c3:af:
39:c8:f8:8a:42:af:fa:af:77:ba:4b:33:72:43:62:
4b:c8:30:54:09:33:cc:94:5b:3e:50:9c:b9:e4:72:
6e:43:e2:7d:82:8a:80:40:0e:81:54:bc:37:90:7c:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:77:CF:E8:5A:99:93:C5:CA:5C:08:C1:62:73:CE:D8:F1:EB:79
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5b:59:20:b0:3e:5f:58:46:20:38:95:6e:cf:c1:3a:dd:e4:
06:f2:02:4e:34:51:2e:59:41:55:33:82:06:ce:b6:29:d6:9a:
fb:50:21:63:b2:e0:76:16:97:06:90:b2:94:2d:32:fa:23:0e:
1b:8e:c5:d8:55:8b:1c:34:c5:95:46:56:bd:6f:33:53:59:f1:
5b:fd:e6:bd:d6:86:ef:eb:11:69:62:8c:0c:91:e0:84:93:72:
e3:44:5a:d8:c9:0b:5f:e4:da:06:54:54:41:45:da:53:c7:39:
28:ac:b1:6b:a1:07:d7:af:d4:f4:e6:fb:9b:7b:81:f9:56:54:
c1:60:64:de:e4:81:d8:22:c9:b8:db:4a:d0:bd:22:3c:00:26:
73:b3:14:5d:3a:81:cb:e2:a3:02:37:ec:7c:ac:e6:84:31:db:
ed:09:40:5c:54:f3:67:73:f1:b2:02:0d:a5:57:e1:50:16:27:
3e:5e:c8:33:32:1c:94:e3:f5:2b:6e:aa:28:95:27:71:58:4f:
46:07:dc:c0:99:33:2d:10:68:89:1a:bc:00:c5:20:49:f3:99:
ef:c7:67:60:32:5b:c1:b5:b0:03:b9:2f:d1:a0:31:4c:b4:2b:
3c:5b:cd:fa:ce:87:28:ac:42:31:91:d5:13:06:83:4b:d3:d5:
b5:cb:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:55:00 2025 by rpki-client