Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: 8JLu+mxpqM5eK2aCmf2nMFmiTdS43kYEXgfH+QE7Y7c=
Subject key identifier: 59:AD:97:F1:A2:3F:D8:FF:7F:81:39:1C:A5:C1:08:50:24:70:E8:3C
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 01976C623858C3A7DCC7E233AC85F3552C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:01:05 +0000
Manifest this update: Sat 14 Jun 2025 03:01:05 +0000
Manifest next update: Sun 15 Jun 2025 03:01:05 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: d5YMkxudmZpZcp6McTf8C8ORIk4+FdewR1BbxVkqHHs=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:38:58:c3:a7:dc:c7:e2:33:ac:85:f3:55:2c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jun 14 03:01:05 2025 GMT
Not After : Jun 15 03:01:05 2025 GMT
Subject: CN=59ad97f1a23fd8ff7f81391ca5c108502470e83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:df:a0:4e:6a:0f:97:57:63:85:bc:23:55:
ea:c1:cc:c9:33:7c:7b:4c:de:a9:ce:9a:be:af:ff:
5e:ea:3a:c8:7e:0b:f2:b4:33:15:0a:f8:2a:4a:a3:
d1:c7:56:2a:80:6b:21:ca:e8:94:34:77:db:8a:bb:
09:b1:d2:01:21:ee:60:c1:16:6a:52:1d:84:8f:2b:
94:49:57:e4:e6:da:f4:8d:5f:7c:e7:07:44:22:5f:
45:25:d8:f9:b8:31:b8:52:1c:78:6e:e8:eb:ff:a0:
6d:2d:61:32:31:a4:be:5e:08:cb:c2:18:35:6e:06:
70:3e:3b:29:4b:0f:21:e1:04:8d:ac:a6:af:2d:d6:
99:e2:a5:8f:c1:fc:3c:42:52:b4:09:c2:46:34:15:
09:c8:59:4c:ec:0b:f1:66:41:13:12:21:7e:77:0f:
92:39:5b:e2:6c:3c:b0:50:7c:a0:95:22:35:48:9c:
f9:9b:4e:6d:c4:e7:2d:d2:d6:9d:00:d0:87:ab:4c:
82:ff:dd:10:23:43:8e:38:fc:c2:2a:72:69:eb:73:
b6:cf:c3:61:70:2a:13:bf:1b:c5:3a:16:0e:9f:e1:
07:d8:a3:a0:7d:73:72:92:08:e8:dd:3d:61:b9:1f:
0c:3d:73:0b:13:bf:cd:63:6c:bd:4d:a4:7a:8e:c8:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:97:F1:A2:3F:D8:FF:7F:81:39:1C:A5:C1:08:50:24:70:E8:3C
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:2e:49:d9:89:b5:63:26:cc:d5:6c:e1:2c:73:bb:ff:56:
a8:0e:0a:09:09:87:2e:03:0e:77:c3:b7:5b:6d:2c:c3:b1:21:
3d:9c:1c:35:96:db:ac:b8:7f:38:1b:ce:b7:db:09:1d:87:21:
b1:3a:0a:c5:09:e5:df:1f:35:5a:3e:5e:5c:aa:72:f7:74:4a:
0e:40:e3:ea:55:57:3a:e0:2f:22:b2:26:27:80:ca:c2:c1:1f:
c0:7c:b7:88:b5:d1:e3:76:b4:0a:c5:3f:a0:31:5f:d9:e8:fb:
97:0e:08:f8:98:0c:d5:de:65:01:5e:b3:f7:10:9d:0e:5d:09:
70:df:2f:a4:b5:2f:75:c2:b6:6b:83:e3:85:82:f9:0a:e7:7a:
4e:4b:17:2d:47:94:f8:9b:d7:16:54:44:fd:fe:69:33:75:48:
60:a4:87:51:c6:40:ac:e6:75:7e:6d:57:e8:f8:30:db:eb:56:
50:02:eb:64:64:69:9a:10:5d:95:4a:0b:34:29:56:63:4d:c8:
26:c3:b3:56:3d:66:63:53:cd:e4:6f:66:56:98:19:12:51:02:
eb:2f:6c:a1:59:53:aa:44:9d:97:a1:82:da:b6:86:a0:aa:03:
6d:4f:94:4e:0a:7c:80:e5:ee:19:2f:84:a5:53:75:06:71:6b:
53:1b:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:57 2025 by rpki-client