Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: sk+7TiMhA3fpaX8qZW4trK2EIsi14vtbDmWXBhF0vmk=
Subject key identifier: 98:41:B4:77:09:46:61:13:B7:1B:6B:0A:9F:6C:75:86:AA:28:41:A1
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019782448C9447A96B2F6DA802677E160373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 85
Signing time: Wed 18 Jun 2025 09:00:19 +0000
Manifest this update: Wed 18 Jun 2025 09:00:19 +0000
Manifest next update: Thu 19 Jun 2025 09:00:19 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: /BxoVSDeKDiPa0QM3/Tu02EJ2PiTMz1ksVYLI7WFYSo=)
2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:8c:94:47:a9:6b:2f:6d:a8:02:67:7e:16:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Jun 18 09:00:19 2025 GMT
Not After : Jun 19 09:00:19 2025 GMT
Subject: CN=9841b47709466113b71b6b0a9f6c7586aa2841a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:55:54:1c:f1:2d:5b:d2:53:24:c8:67:f4:
bb:bd:54:a6:db:97:2b:f9:15:c9:58:2e:e1:8f:e5:
59:ba:6b:2f:7f:1a:58:c1:39:62:f9:06:ae:55:7c:
5f:1e:46:d4:4d:76:4b:f9:2d:45:5f:70:d6:79:e8:
f2:81:11:66:8e:ec:a4:8a:31:be:bf:b8:44:dc:a6:
4e:16:81:e8:b3:75:f4:2a:1b:3b:d7:0c:b9:ec:8d:
c6:00:ea:46:ec:c3:75:6f:75:7d:e8:c0:d5:d3:2d:
a9:14:f4:2f:64:28:0a:a3:2a:41:22:ac:1f:fb:73:
c2:9b:2e:dd:23:c3:8c:9c:96:e1:6a:1f:d0:14:41:
e0:23:56:82:25:46:f4:da:22:30:1b:40:ff:eb:c9:
c5:05:9d:b3:ee:cb:38:5d:c6:d6:13:2a:5e:39:de:
8e:bc:66:f9:a0:e7:bc:36:25:12:54:11:6c:be:fc:
e7:8f:ab:b0:23:61:76:b0:b6:ca:4d:3e:d5:0c:b4:
8f:94:13:95:bb:d4:80:1b:69:70:c4:88:75:ff:78:
c6:f6:dd:5b:23:1a:f2:cd:5f:79:fa:9c:c7:62:fd:
27:79:11:0f:73:21:ea:24:89:19:e8:34:66:bb:5b:
bf:84:77:78:cd:68:06:d4:44:67:58:db:88:64:35:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:B4:77:09:46:61:13:B7:1B:6B:0A:9F:6C:75:86:AA:28:41:A1
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:48:1a:7f:16:ad:4e:34:a5:8c:86:42:e6:d6:f2:4e:de:fe:
d1:53:63:65:2e:6d:ed:ba:86:df:7f:68:b9:b0:17:b1:97:e5:
eb:41:38:43:eb:59:32:4d:fb:5d:8b:d3:76:d8:6f:13:ff:0f:
e7:aa:9a:2a:43:34:66:a3:81:01:50:29:48:57:a0:c8:4f:2d:
2f:e4:65:2e:81:3c:7f:84:71:16:d4:d0:a0:d0:3f:9b:ed:02:
ae:4c:1f:17:e5:cd:df:05:f8:f0:41:28:0f:de:4a:21:19:67:
32:3b:c0:54:4a:d0:ae:0e:fb:9f:b2:9f:a8:46:6b:3a:43:aa:
74:ee:45:5b:5e:c8:a7:95:4f:3c:b2:f5:af:ae:b4:9e:e6:71:
1d:91:30:e0:c4:bf:ea:80:1f:53:44:2d:b5:0c:44:71:94:9e:
cd:f1:3a:76:99:3d:87:f5:d9:a6:f5:ff:f8:1a:89:26:93:21:
b4:18:16:30:e9:b8:08:d3:18:e4:d9:b6:d7:ad:a2:86:13:1a:
9b:b4:7a:ff:81:c2:69:67:ba:53:2b:4a:16:5a:a2:2f:ed:db:
17:e0:a1:36:46:90:d5:a4:a9:9d:b9:b9:15:e3:cc:27:52:f9:
76:4f:13:12:fc:d1:c9:bd:6d:37:93:08:90:9a:aa:89:3e:d0:
f8:b4:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:56:11 2025 by rpki-client