Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: UbgE9G2L7a1K/TJXcrsnISK23oOMxHffukAZ9lXj/cs=
Subject key identifier: F9:86:02:4B:F4:CE:30:20:0A:E7:60:3C:F3:C5:23:2E:9B:6A:83:DE
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 01976C61EEF8A516AA224315B17C22855CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0C23
Signing time: Sat 14 Jun 2025 03:00:46 +0000
Manifest this update: Sat 14 Jun 2025 03:00:46 +0000
Manifest next update: Sun 15 Jun 2025 03:00:46 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: /5kbW3mIWSl87STyX0CKjOjmGtGtpN0ZvePAIpx65o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:ee:f8:a5:16:aa:22:43:15:b1:7c:22:85:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Jun 14 03:00:46 2025 GMT
Not After : Jun 15 03:00:46 2025 GMT
Subject: CN=f986024bf4ce30200ae7603cf3c5232e9b6a83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:46:29:fe:4d:01:4f:e7:a4:91:73:2e:97:
f9:b4:29:6a:56:07:07:32:9c:b7:e3:bc:66:f6:e3:
10:a5:d2:fc:77:c6:db:2a:7a:a0:7a:c9:fc:31:f8:
68:d9:ca:79:b8:24:04:59:90:32:f7:65:41:c8:f6:
a5:af:54:ca:43:9a:cc:a4:5a:f4:28:f5:a6:ea:30:
07:21:6b:a2:a6:6a:fd:68:ac:1d:fc:63:b9:cb:2a:
6e:1a:3c:61:b6:fb:78:0b:a0:34:bc:db:5f:25:26:
82:1a:0d:55:5f:08:6f:04:58:72:73:8d:31:39:a2:
26:24:33:88:59:83:41:5f:90:c8:8d:6b:6d:96:84:
07:63:0c:3d:f4:54:32:53:a7:78:c7:f2:03:d7:7e:
68:13:31:7a:51:9d:44:5d:ca:4e:9a:3b:e3:9e:27:
84:77:98:c3:f5:7e:09:ce:3a:13:d2:d7:05:0a:10:
6f:0f:0b:bd:1c:56:e0:e8:53:c9:42:05:b6:f6:53:
84:e7:1d:36:2d:b2:d1:5c:5f:18:3a:fc:95:f4:b5:
34:13:df:2c:80:66:76:1d:dc:0d:45:d7:35:8a:f4:
f0:0b:5d:66:e5:cb:60:78:1e:52:1c:a3:39:41:d7:
60:32:5f:e1:bc:8d:9a:05:5e:1a:10:66:d4:1a:eb:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:02:4B:F4:CE:30:20:0A:E7:60:3C:F3:C5:23:2E:9B:6A:83:DE
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:22:11:f5:13:92:e2:1c:be:62:7e:47:c1:87:69:f5:ef:0e:
c5:ab:67:b9:6a:77:32:02:45:07:39:b8:79:e9:f8:cd:29:10:
d6:fb:b8:d6:ff:ab:7a:52:7b:1e:61:0f:e7:3a:e1:9f:c7:19:
3b:b0:a0:2d:ac:d4:8f:4c:6f:d8:72:ec:6d:2e:cc:88:34:c0:
03:10:85:df:02:ac:f0:06:43:82:cd:f5:fa:33:89:07:63:93:
52:09:15:a9:26:b4:6b:82:95:78:e7:5a:ec:ef:38:f2:30:70:
72:12:9e:77:48:93:6e:14:14:68:45:81:7c:e9:0b:8c:0d:12:
1b:b3:b9:2c:de:4d:75:2e:be:45:d2:cb:94:ae:fb:da:9a:a9:
82:4a:a4:5e:74:f1:87:5d:a8:df:de:13:0f:39:e1:2f:25:e3:
cf:e3:fc:70:4b:ab:78:7b:61:6f:30:c2:22:82:0a:b7:e5:11:
89:5c:a1:2e:cf:02:b8:19:51:94:e6:75:13:1f:6b:de:ce:6e:
13:b3:3a:9a:d7:af:81:a7:41:ed:4e:d5:b1:e1:c1:6c:c1:f9:
3f:37:bc:2d:09:18:45:2c:fb:ed:84:d5:80:b6:e5:06:23:21:
1e:4d:3c:9f:a8:d8:78:ce:05:3a:40:94:13:18:4c:cc:87:b5:
db:c1:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:15 2025 by rpki-client