Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File: JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier: 9Xq49Jin4v8yvX3txboibThY8UX45dXWww9CkgiqjOg=
Subject key identifier: 8D:D4:67:42:C9:05:BD:E4:6A:32:85:7B:FE:69:0F:5F:D3:66:FE:7A
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 01976BBD8CD0BBE8A3FE2DD4122F3554A200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number: 0CED
Signing time: Sat 14 Jun 2025 00:01:13 +0000
Manifest this update: Sat 14 Jun 2025 00:01:13 +0000
Manifest next update: Sun 15 Jun 2025 00:01:13 +0000
Files and hashes: 1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: WZ244/SUMDjRPPxnu4oGu4kqFP7batk2N3B7ZELXnc0=)
2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 18:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:8c:d0:bb:e8:a3:fe:2d:d4:12:2f:35:54:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Jun 14 00:01:13 2025 GMT
Not After : Jun 15 00:01:13 2025 GMT
Subject: CN=8dd46742c905bde46a32857bfe690f5fd366fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:96:7f:57:19:2e:b9:da:25:67:27:25:44:
d8:fb:b7:d6:b0:ee:b9:b7:38:5a:27:e1:69:88:25:
99:58:20:01:19:15:18:0c:04:32:b3:b1:a0:69:c4:
95:8d:d4:5f:94:34:77:d9:f3:6f:e0:62:88:fd:c9:
32:0d:f2:ef:df:16:8b:9d:8b:de:11:3e:15:f0:f9:
51:5b:df:24:eb:cb:b2:93:a8:96:23:27:28:64:2d:
c7:f5:ce:f4:63:87:fe:8e:da:da:8e:09:b1:74:fb:
4c:a3:cc:2b:49:0f:e6:f3:01:32:9d:e5:94:6a:39:
e7:cf:d3:7e:e8:c2:fd:5e:9a:e5:e1:57:7b:5d:c2:
51:b7:70:51:1b:01:3a:41:02:87:ea:e8:c3:86:2d:
3d:6a:64:74:67:c3:07:c6:26:ad:a5:5a:25:a5:ed:
ce:fb:a4:39:25:20:c7:8d:fb:ac:1d:98:f5:b8:a5:
0f:b9:a9:09:c5:a6:56:ed:60:ae:40:4f:b1:45:3b:
72:38:7b:55:2f:9c:a8:81:e9:b1:5f:59:f2:3a:68:
48:d7:2f:34:16:bd:9f:e2:87:41:e6:a8:3c:a3:fe:
46:f3:e1:d7:8c:02:fc:3e:13:46:48:b0:44:42:fd:
51:24:44:8b:9d:85:33:0a:75:b5:38:fb:07:6d:77:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D4:67:42:C9:05:BD:E4:6A:32:85:7B:FE:69:0F:5F:D3:66:FE:7A
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:69:02:32:19:ea:27:f3:3c:11:96:03:21:84:c7:b3:6e:
8c:b4:58:a9:32:3e:cd:d4:a2:76:3a:0e:52:4b:b5:e6:b4:9d:
c7:23:b7:4a:fa:89:38:1b:2d:26:b0:e5:92:bb:5c:8c:60:4e:
15:fb:d1:aa:66:d3:c8:86:ab:cf:0b:8d:4f:97:b9:9f:95:22:
60:9f:99:44:70:3c:fd:ab:91:e8:06:75:90:f2:23:b1:9d:0c:
2a:e8:07:a7:d6:f7:32:1c:3f:65:79:0a:9c:37:c8:57:aa:f9:
5a:95:c7:fb:52:1c:a2:ac:90:42:7d:b8:91:19:84:a8:1b:6e:
17:3b:11:54:73:01:da:ef:68:27:74:e3:02:00:96:65:a4:10:
58:21:cf:f9:9f:77:8c:6e:2f:0e:09:5a:9d:fc:8c:1d:61:39:
86:b7:5e:3a:eb:f0:16:cb:79:7a:7d:60:32:20:96:cb:d5:7f:
c6:5f:57:54:ab:1a:b4:93:f9:30:3a:82:f3:f5:fb:2e:17:88:
6d:96:77:28:50:4e:6b:38:ea:fa:35:19:55:73:0c:65:f7:2e:
32:9c:2e:2a:ea:66:37:23:e7:33:2f:d9:4d:03:63:e1:49:94:
01:be:c4:26:5d:20:8f:ac:da:94:54:6f:a2:3b:89:17:3d:3d:
81:13:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:58:23 2025 by rpki-client