Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
File: JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft (raw, json)
Hash identifier: tG4k31PGiStBpEW4TWri33i7VJq28jKAnYIfXKJxO+4=
Subject key identifier: B0:C6:5A:E0:AA:08:D4:A0:64:C8:87:EF:33:C2:77:7B:4F:2B:41:86
Authority key identifier: 24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
Certificate issuer: /CN=24e940db190b692cd1b0d583edb6d8c361124569
Certificate serial: 019770AC64B8A23CD5400FDBF4E24242B1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
Manifest number: 1F
Signing time: Sat 14 Jun 2025 23:00:35 +0000
Manifest this update: Sat 14 Jun 2025 23:00:35 +0000
Manifest next update: Sun 15 Jun 2025 23:00:35 +0000
Files and hashes: 1: JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl (hash: Wtnw0GyKYsHeY7f5t7AtjINtDFIDQek28LTNmDy8zHw=)
2: NDyL4QmyZMdWfVseu9H3PyESraU.roa (hash: 2KgZJolbNaz+51AuiNXbaQEgEsCh7UoocaNukepjnzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:64:b8:a2:3c:d5:40:0f:db:f4:e2:42:42:b1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e940db190b692cd1b0d583edb6d8c361124569
Validity
Not Before: Jun 14 23:00:35 2025 GMT
Not After : Jun 15 23:00:35 2025 GMT
Subject: CN=b0c65ae0aa08d4a064c887ef33c2777b4f2b4186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:fb:a5:c6:e1:df:5d:0f:63:8f:e5:13:67:
96:74:9b:34:f1:a9:9a:89:9e:07:85:f5:d5:d5:f3:
69:87:a9:a0:f2:f8:5d:77:dc:65:d9:2b:d4:95:b1:
d3:1b:ee:70:8a:92:aa:48:06:73:2d:b4:de:0b:14:
45:83:54:7f:6a:03:b3:47:4c:70:a4:19:90:17:17:
31:fb:0a:cc:16:1b:66:2a:48:d1:43:d7:a2:df:a9:
60:26:a2:fd:83:0c:e0:48:10:96:31:b5:f9:08:d3:
78:86:2c:ce:e6:30:c8:1e:3a:c8:de:62:4b:0a:a5:
3e:61:af:f6:4c:16:fb:e9:47:e4:42:2a:f1:9a:f8:
47:82:04:68:04:22:62:4b:10:18:d3:6f:f0:59:e9:
71:a3:28:54:e4:1c:89:89:01:e8:f4:e1:70:a0:8a:
ee:84:3a:b1:5c:71:e2:64:76:e9:bb:01:02:58:fe:
f1:69:58:68:7a:93:ef:3e:28:f5:80:8c:ec:0b:db:
62:4b:a3:42:72:c6:d3:8a:5d:47:49:f0:be:5c:15:
e8:fe:2b:32:7d:6f:c2:a7:49:32:ac:b6:59:38:54:
a9:f7:c3:43:09:57:78:64:d7:1d:4e:b0:1d:bd:33:
25:17:45:99:fd:71:e6:4c:a6:b2:c8:c2:23:c6:10:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:5A:E0:AA:08:D4:A0:64:C8:87:EF:33:C2:77:7B:4F:2B:41:86
X509v3 Authority Key Identifier:
keyid:24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f8:5d:29:87:5d:c2:72:2b:39:bf:b5:86:1b:f0:27:97:4c:
b9:00:8d:12:94:46:f8:35:98:01:17:15:8e:d1:4a:07:60:81:
57:87:b3:7b:12:08:e1:bd:be:44:2d:e5:45:c5:c4:3b:28:5c:
13:7a:dc:0d:81:99:9f:b0:48:71:0b:95:2e:1c:9d:25:8f:30:
f8:3f:83:27:24:7c:3f:53:f5:31:97:66:b1:e3:f5:5c:eb:05:
ab:15:d1:45:99:dd:6f:b8:af:e1:2c:9b:f5:16:18:a7:4b:7a:
e3:76:65:85:b4:fb:bd:d6:1d:f6:c6:f3:a8:43:31:7f:e9:e7:
d6:d7:26:91:83:11:c1:40:92:59:e2:43:92:48:d5:2c:88:8f:
38:47:1c:40:70:c1:98:e1:e1:97:89:cc:cf:19:99:5a:40:a1:
2e:9b:a3:ed:4a:12:aa:f2:bb:5b:2e:c3:05:b9:2c:fa:bd:9d:
a1:b7:a2:34:ff:32:a3:e0:41:31:1b:ca:2f:2c:56:5f:1f:c6:
6b:ba:2a:b0:11:e9:a8:be:18:a4:58:87:76:4b:80:dd:9a:db:
62:08:b9:c2:26:79:24:73:60:2b:f8:6e:c5:94:0f:fe:5c:ff:
03:e3:1e:a7:75:17:c7:29:6c:26:c8:30:c6:08:87:db:4e:b5:
d9:10:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:51 2025 by rpki-client