Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: 3+6pfDwITagBhxgmXmeigVeSFJSQev87s+m9D9t9Ts0=
Subject key identifier: 50:B5:8F:EE:CA:D2:94:B1:D8:F2:9A:F5:5B:84:4F:57:6C:75:2F:C8
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 01977ED62D0B0DC7809C44B2FC6A58BEFBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 17:00:54 +0000
Manifest this update: Tue 17 Jun 2025 17:00:54 +0000
Manifest next update: Wed 18 Jun 2025 17:00:54 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: 1Yme+l8T42OB0/xH0sHrPCdepHAt6RPB+tDlXSzbBy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d6:2d:0b:0d:c7:80:9c:44:b2:fc:6a:58:be:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jun 17 17:00:54 2025 GMT
Not After : Jun 18 17:00:54 2025 GMT
Subject: CN=50b58feecad294b1d8f29af55b844f576c752fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:4e:bd:4d:28:99:12:00:7f:9c:dc:45:11:
ea:52:ee:82:a9:07:66:94:30:83:4d:48:22:4b:54:
3a:82:7f:71:f8:e0:10:d7:be:24:0e:17:c7:36:bb:
6d:fc:1f:0a:64:58:dc:3a:f4:b5:bb:e3:75:1e:a0:
6e:4f:bb:c7:8c:b7:c4:bc:0a:58:6a:38:10:56:d6:
54:45:a9:8d:6e:d5:c0:c0:d7:a7:2c:98:a8:f6:18:
59:9d:6a:7f:5e:e5:e9:1f:80:cc:e3:c3:30:35:0a:
f6:c6:6f:2a:88:18:6f:34:b8:82:71:de:f1:98:4d:
e1:d2:07:9f:b0:f6:46:00:dd:f9:de:54:07:11:86:
e9:c5:07:de:44:20:6b:f3:b5:66:97:31:5e:23:ee:
f5:f0:0d:d0:52:9e:2b:bc:c7:68:2d:c7:b4:41:d9:
5c:aa:a4:ef:4a:d1:97:67:85:4b:77:7a:5d:0c:e1:
15:ea:0f:5b:9b:4d:8b:20:c8:53:35:03:57:12:c4:
0b:3b:43:2b:08:b4:73:ea:66:2f:49:85:ca:10:a0:
0e:6c:d3:ba:c5:f1:f5:ba:d2:94:38:a6:26:db:f0:
8b:45:6c:60:78:04:b3:fd:a3:0a:f0:f0:e7:a9:da:
31:96:eb:35:0f:ab:90:6a:df:f0:4e:82:ab:17:41:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:8F:EE:CA:D2:94:B1:D8:F2:9A:F5:5B:84:4F:57:6C:75:2F:C8
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ba:0b:3e:af:f7:f3:b5:13:1d:c3:92:6f:60:dd:18:cd:08:
19:cf:b5:83:57:99:3d:2f:8a:7b:ec:e4:9e:c9:a6:81:a5:55:
46:80:92:0f:1a:61:a9:3f:b9:20:18:b1:d9:f6:61:17:a9:72:
f0:31:34:f8:b4:90:d8:6a:a4:c6:dd:a1:5b:a3:39:0e:be:17:
54:12:1e:b5:f8:c0:9f:f0:35:b3:1e:ef:fe:95:8a:96:41:9b:
d5:c4:05:6a:45:cd:d3:fa:17:15:9e:b8:fb:4b:ca:d4:5c:27:
d9:35:85:e0:a0:e2:f5:40:3d:d6:5b:51:54:d5:92:58:25:fb:
d1:88:82:47:02:0e:49:f4:08:36:03:07:39:ad:b3:8b:5a:1b:
c0:ea:72:8f:2b:67:7a:31:af:a0:ff:2a:da:b0:75:9c:b5:59:
cf:9d:51:fc:ca:3d:81:e7:f6:b8:a1:3d:0a:25:d0:ff:8b:f9:
24:81:1a:7c:da:6c:22:ef:0e:e0:04:b8:79:49:82:f5:dd:84:
5f:e8:c0:bf:e4:49:00:c4:ae:09:b2:15:83:44:69:38:6f:20:
8c:1e:ea:90:83:55:48:68:0b:13:59:9a:b6:08:4f:69:dc:2f:
68:45:b3:5f:8d:aa:53:dc:fc:62:57:ac:19:e6:81:5d:02:82:
13:9d:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:44:25 2025 by rpki-client