Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: h1Bcy/b2jT2JHJTQvYdUnpWY7w8mhUjC4VdfP6JSssA=
Subject key identifier: 51:D7:82:F3:E0:0E:09:B8:10:DD:A7:3B:5D:1D:C9:75:46:0B:D9:51
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 01974AE87F6A8E075FACF0DD55E04D26A5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:40 +0000
Manifest this update: Sat 07 Jun 2025 15:00:40 +0000
Manifest next update: Sun 08 Jun 2025 15:00:40 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: VBTU5sYTkCLbrW+jFbn7xtNChC55bDEqECxKKJ/D2qI=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:7f:6a:8e:07:5f:ac:f0:dd:55:e0:4d:26:a5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Jun 7 15:00:40 2025 GMT
Not After : Jun 8 15:00:40 2025 GMT
Subject: CN=51d782f3e00e09b810dda73b5d1dc975460bd951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:13:7b:59:4b:98:8c:bb:62:5b:4d:3b:ef:
75:b1:29:e5:c5:34:7d:d8:ca:a4:63:b6:56:fe:9f:
43:4f:bc:d0:92:2c:51:10:1f:65:bb:14:40:71:c3:
71:04:87:26:04:44:85:70:ed:03:60:7d:78:b8:ab:
13:6d:f3:f7:2b:55:05:f6:7f:db:c6:37:a0:74:66:
40:f8:88:80:2d:9b:2b:de:5f:23:f3:5d:cf:0c:56:
4c:72:86:71:d3:c6:8e:8e:0f:3a:42:67:c8:1c:9f:
a6:81:46:45:76:70:75:84:93:a7:8b:8e:64:c3:52:
73:58:44:d4:c2:c9:73:0d:5d:e2:e9:52:e7:a9:92:
5a:31:87:6d:41:7c:f7:36:0c:96:13:cf:e7:ff:86:
56:10:66:9a:d9:35:24:5a:95:a0:ef:56:e5:b7:93:
ff:cc:f0:22:72:75:7f:2b:85:c1:2a:8d:00:c8:ef:
6a:27:94:64:34:37:30:72:92:43:64:2b:88:21:1b:
23:c0:0f:63:8a:0d:24:15:84:7d:13:84:bf:4c:97:
8c:df:5f:72:65:05:96:f1:e3:83:cb:69:a2:7d:e3:
83:aa:e5:37:d1:7d:21:ce:9d:1b:9a:b0:5c:ec:73:
4a:9a:77:d1:f6:d8:8d:49:a3:51:fa:c5:45:49:ea:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:82:F3:E0:0E:09:B8:10:DD:A7:3B:5D:1D:C9:75:46:0B:D9:51
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:10:93:04:48:d3:be:30:e4:08:08:e9:fc:42:73:19:14:e8:
f9:f5:45:0b:b7:21:e7:d1:b6:02:a9:55:84:9c:d3:f4:d1:1c:
1a:e8:f5:30:a6:51:54:8c:80:34:ef:07:5a:35:a3:15:62:09:
8e:3a:23:9c:ee:92:80:a3:7a:e1:6d:ef:08:4a:b5:78:a0:e1:
a1:25:41:04:27:e9:00:9a:58:f1:a0:18:9a:43:b7:89:7c:ec:
ea:5b:d4:72:a5:01:12:53:f2:41:54:a9:c2:e3:0b:d4:cd:2e:
b7:c6:e0:2b:9e:a4:fd:58:b5:e9:a0:ae:a7:e7:f1:73:b8:f0:
d3:86:9f:7d:ef:5d:a1:de:94:0c:72:55:fc:29:70:a7:20:79:
65:1e:54:fa:fe:86:b4:cd:5e:8c:73:ec:fb:0b:0a:09:ae:76:
e8:23:dc:c2:5b:ac:3e:81:ab:80:bc:40:28:90:7d:6c:e3:fe:
e0:e2:79:8b:c7:5e:84:5b:db:a5:42:19:a1:3c:45:82:02:8b:
b4:21:79:42:7e:ae:bd:5a:14:22:fd:c5:1c:8d:d7:34:41:2b:
58:49:89:57:65:e5:e2:ad:52:6d:b4:a2:43:2b:9a:a4:65:ab:
5a:8f:28:d1:d3:5c:ac:c7:34:e3:29:c4:24:14:f2:19:fb:65:
c2:3f:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:19 2025 by rpki-client