Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: aYVIrd5ayUK1OWzgTaLmGaAh2wV8ZdpK7JqZYSdblcw=
Subject key identifier: DD:F1:5F:AD:9E:01:6B:61:E6:02:E1:3C:C8:99:C3:3C:5F:13:50:9E
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 0197481E8A1658536BCDE7830F7F41F21355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0C72
Signing time: Sat 07 Jun 2025 02:00:50 +0000
Manifest this update: Sat 07 Jun 2025 02:00:50 +0000
Manifest next update: Sun 08 Jun 2025 02:00:50 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: Cujq6a4U67JxQkK8RZXU/z1wjKVqdvun+yVywvY/kNc=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:8a:16:58:53:6b:cd:e7:83:0f:7f:41:f2:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Jun 7 02:00:50 2025 GMT
Not After : Jun 8 02:00:50 2025 GMT
Subject: CN=ddf15fad9e016b61e602e13cc899c33c5f13509e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:47:03:11:de:2b:d8:db:ab:2d:f1:23:28:
9c:c5:db:97:66:76:ee:9f:7f:16:7e:68:70:68:95:
f4:a3:70:05:17:82:c3:f9:d4:54:a6:f3:cf:82:ce:
b3:fd:25:de:ca:d3:49:d3:02:d8:c0:77:4c:8d:5a:
39:b5:1f:57:7c:33:9c:7a:07:e8:b9:9d:fc:bc:75:
b4:40:9d:d9:04:90:ec:ed:03:8a:7d:2e:f4:02:09:
37:ee:d9:fb:39:57:19:bc:4c:4b:a9:99:62:92:44:
1f:85:0e:85:19:09:3d:f6:08:7f:ef:92:a5:79:9e:
0c:01:b2:b2:61:8a:ac:77:d0:b6:34:bd:9f:22:c5:
75:24:73:f2:14:52:91:50:bd:9a:02:27:8c:b9:71:
d7:63:3a:5e:74:46:a4:7f:25:9e:f3:1e:87:8f:ff:
9d:20:86:b4:6d:2a:61:8f:6a:fb:b1:ae:84:fa:6c:
e2:c2:b3:de:ff:f6:ef:09:20:2e:a5:50:18:ae:27:
ef:56:09:61:69:1a:21:96:8d:a7:dc:0e:47:56:d0:
9a:50:54:09:18:50:16:88:e1:2e:95:a5:66:11:e5:
7a:f1:f5:96:15:2f:b7:e0:31:6c:c4:ed:af:e1:84:
78:fe:11:22:8f:a3:c2:27:54:62:b9:f1:15:8a:70:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:5F:AD:9E:01:6B:61:E6:02:E1:3C:C8:99:C3:3C:5F:13:50:9E
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ac:92:3b:25:24:4c:4d:37:89:76:d5:4d:39:9f:ea:b3:d3:
88:16:4a:f1:e0:9a:ab:6c:8e:06:53:8b:3b:c4:f7:95:47:2a:
6d:2a:f7:b6:0d:f0:50:15:69:7d:5a:69:71:e3:e5:23:22:0f:
c2:75:0d:e1:cf:75:4e:86:83:84:ce:b8:5c:af:f3:41:53:88:
c7:8d:4d:ed:25:4f:15:3e:47:da:7e:bc:a2:cb:82:5f:18:16:
a2:26:f6:ff:42:91:17:5f:3d:ca:6d:db:31:4e:51:27:eb:1c:
70:77:62:e1:ea:8e:61:05:70:d1:11:e1:65:85:cb:46:1a:99:
47:83:cb:0c:86:91:7b:ea:e2:1a:f7:41:57:a5:29:ac:40:52:
33:9e:8c:e0:5d:d1:75:ab:fb:dd:c9:2f:28:bf:f6:be:eb:9e:
07:3e:36:79:3c:3c:62:b3:7f:b8:32:a9:e8:46:37:13:e5:03:
e3:de:d3:57:d6:81:25:4c:fa:3e:b7:72:7c:fe:5c:67:aa:91:
96:06:63:55:54:ec:c3:2d:64:c3:5b:11:f9:11:69:22:9e:3e:
15:b4:9a:37:4f:42:3a:e1:4f:0d:42:87:ee:c4:d4:62:93:a9:
85:a1:c6:af:c1:bd:f6:33:6e:aa:b5:32:3f:a9:4c:1c:10:01:
85:20:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:30:54 2025 by rpki-client