
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 93/RivdF/mwiIOoLj4E8k/NcBHO81pvtji4BZ8esbUg=
Subject key identifier: 24:C3:D9:BD:EB:3B:C7:5A:45:03:6C:ED:54:86:61:EC:1B:DC:72:D4
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 0197512194D07DA856186E046861D5EDA458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 20:00:44 +0000
Manifest this update: Sun 08 Jun 2025 20:00:44 +0000
Manifest next update: Mon 09 Jun 2025 20:00:44 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: oQsqYM0PItWp/VTSwDzKzFO6joEWqnN1ADf5TKzJpr0=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:94:d0:7d:a8:56:18:6e:04:68:61:d5:ed:a4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jun 8 20:00:44 2025 GMT
Not After : Jun 9 20:00:44 2025 GMT
Subject: CN=24c3d9bdeb3bc75a45036ced548661ec1bdc72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:5d:63:82:5b:4b:ea:ea:15:42:85:6c:68:
03:6f:bc:6b:84:c6:32:6e:22:1c:18:6c:32:b3:85:
42:5b:47:90:73:3b:21:02:75:cf:48:aa:7b:e0:bd:
83:c8:8b:54:b9:8f:ab:f0:7c:27:74:ad:07:e1:ae:
98:fe:75:94:de:f6:59:5f:48:04:18:11:c1:98:e6:
69:c4:c6:48:58:d3:e1:2d:a2:df:ae:ba:af:cd:c1:
44:5b:ff:c5:5a:11:68:6f:b9:6b:66:26:fc:6e:ee:
fc:5e:db:24:a6:22:74:c0:f3:d5:13:be:07:47:e3:
61:e0:40:05:60:34:dd:14:65:b5:58:44:0a:17:cd:
ca:d7:83:e5:dc:83:65:8e:d9:b1:64:69:9e:c6:7d:
34:0d:13:47:84:73:3a:d2:a8:3f:4d:2e:f7:83:60:
3e:66:32:39:f4:80:f4:94:b6:a6:78:41:b8:0c:93:
0c:9f:40:fc:c0:4b:37:68:3b:1a:8e:ff:79:8c:5f:
f1:9f:ec:ab:91:79:24:97:53:53:d2:de:1e:76:fb:
78:6e:a9:1f:be:a2:e5:72:41:41:77:b1:47:fc:b2:
d7:46:cd:57:67:46:b3:b9:19:7c:59:e6:c8:a1:54:
91:19:d0:73:f0:98:58:60:14:d4:9e:f1:cb:7c:e2:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:D9:BD:EB:3B:C7:5A:45:03:6C:ED:54:86:61:EC:1B:DC:72:D4
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:c2:d8:70:56:aa:52:85:f8:d0:25:17:ce:a4:da:5f:91:
25:7f:52:f3:a8:5e:89:63:9a:66:d3:fa:8e:2c:fd:45:52:68:
19:b5:5e:10:4c:33:76:6f:cc:bf:2f:26:a2:73:dd:46:19:bb:
13:6e:5a:a7:86:fb:c2:1e:a1:dd:ef:67:8e:1f:0c:af:08:ff:
62:cd:da:93:09:67:e4:2c:cf:2f:ae:3e:07:34:d5:c2:ea:95:
61:97:c4:c7:fe:0d:3b:0c:cc:0a:6b:5d:96:8d:c8:be:e5:b7:
ac:28:3d:87:5a:e7:2e:78:7e:2c:7e:fd:c5:5a:44:87:34:e6:
df:1c:ee:22:66:83:4f:9f:49:c2:1d:f4:a1:2f:7f:31:a1:4d:
ed:12:67:e5:cb:b9:39:08:84:c0:57:1f:79:a9:e9:94:0c:7b:
a2:c6:31:cf:ae:6a:f5:c8:bb:5c:04:46:92:5e:8b:d3:a1:00:
03:3f:e0:8d:bb:56:9b:5a:f8:da:d6:1f:30:cf:e4:3c:c6:13:
f0:d7:a3:32:2a:dc:41:72:db:5c:4a:78:ca:60:6b:e2:9b:d1:
8a:2c:40:e4:15:bb:86:29:91:4a:1d:81:06:33:9f:12:00:94:
9e:99:9a:35:22:a3:cc:50:a0:37:7b:cf:66:4e:bb:78:d5:11:
af:a9:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:35 2025 by rpki-client