Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: +kAN44hKyIjk9pYEofZnYKqcuaLdqm5aJKcXogwOaQc=
Subject key identifier: AC:A1:BF:61:38:7E:61:FD:1C:BD:E2:44:02:89:FA:1C:2E:D9:BA:22
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 01976D0698CACA6BCD320DFC343C7CCF8804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0B73
Signing time: Sat 14 Jun 2025 06:00:38 +0000
Manifest this update: Sat 14 Jun 2025 06:00:38 +0000
Manifest next update: Sun 15 Jun 2025 06:00:38 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: 8ZH5kgLedumm4ER+qK6lIoMt3K2kVCu4OWlaWWsrteI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:98:ca:ca:6b:cd:32:0d:fc:34:3c:7c:cf:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Jun 14 06:00:38 2025 GMT
Not After : Jun 15 06:00:38 2025 GMT
Subject: CN=aca1bf61387e61fd1cbde2440289fa1c2ed9ba22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:68:60:1e:36:34:26:97:64:da:7e:c5:d8:
09:69:03:61:22:c3:76:13:a4:61:01:44:84:d4:83:
74:48:21:98:9b:e1:b0:d2:af:9d:ca:b7:48:16:9a:
22:41:88:75:89:f2:1e:fe:a7:59:aa:67:84:0d:6f:
fb:e0:57:a1:a5:28:1e:03:fc:78:de:7f:79:7d:54:
9e:a4:7b:01:5d:f1:7a:a8:1b:20:ef:b6:3d:a0:fe:
69:75:fa:1c:93:e6:e9:32:41:bb:c1:8e:8f:ee:2f:
48:5a:62:a3:f5:87:c5:ed:5c:f3:d2:83:b8:4a:db:
53:de:84:03:94:1b:44:05:79:a2:a5:cf:a7:82:b9:
13:f9:93:77:d0:b3:1d:0b:d4:ca:32:d7:0a:43:51:
fb:4c:e0:c0:ef:6f:cc:ab:6c:95:08:1b:8d:c7:a8:
16:c8:69:88:a7:82:44:0e:f1:26:56:cd:65:e9:aa:
f8:cc:b1:ac:7d:f5:61:45:75:2d:43:50:ce:5e:80:
7d:0e:23:af:c7:77:98:7d:26:d6:62:61:20:19:a4:
a6:76:f9:05:fa:8a:6c:c7:62:72:71:3e:85:1c:7b:
ec:11:3c:01:b5:20:60:d5:28:77:ac:2e:b3:e8:1f:
6a:7f:79:e3:07:29:fe:3b:b1:26:31:2e:4a:16:6c:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:BF:61:38:7E:61:FD:1C:BD:E2:44:02:89:FA:1C:2E:D9:BA:22
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:de:66:f3:3a:24:f1:07:57:51:f5:13:07:5d:29:b9:80:18:
b0:ab:54:8c:b6:03:8a:f2:10:5a:dd:1c:28:24:27:a0:1c:7c:
f7:0c:25:bf:04:90:ed:23:df:82:e7:63:3a:1f:47:46:86:05:
5e:da:d6:ae:ff:c9:a7:1c:eb:36:7c:90:bf:c4:f8:2d:3f:75:
9d:bb:84:df:c0:52:79:3d:30:c8:6d:ed:46:1c:a8:85:a1:15:
c0:8a:f1:03:59:ff:ae:0d:b6:90:e5:61:fd:fe:cf:47:70:ba:
a2:f5:c9:13:42:0b:7f:b6:95:68:e9:70:5c:f1:15:11:98:0c:
67:ca:03:9c:62:1c:ef:9e:56:be:ec:39:dd:78:0b:f2:c0:82:
68:ba:57:d9:04:6b:b9:d9:a4:58:0f:63:01:dd:d2:6d:38:ae:
22:36:8a:42:4c:52:0a:00:be:45:e9:3d:7e:71:b4:9a:79:5b:
2b:ae:7d:f2:d8:b9:68:26:24:a0:c8:3d:82:da:43:62:b3:74:
01:77:54:6b:8f:14:51:61:51:84:91:68:c9:37:eb:aa:db:7d:
4a:5e:35:d1:40:56:ba:78:f7:09:75:1c:8f:ec:63:24:a7:cc:
1c:8d:c3:a7:09:95:f6:12:13:2a:36:fc:be:35:30:d6:de:1b:
69:25:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:48 2025 by rpki-client