Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: 6M0VQfC7qFFcxCByqDBErhsmtgd4IMS09JkBP5dDP7g=
Subject key identifier: 95:14:69:BE:07:AE:9B:09:17:4F:39:C7:E5:47:09:A0:FB:3C:0D:2D
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 01976BF49C3EAADCBC67835CB8CD5FF702EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 10D8
Signing time: Sat 14 Jun 2025 01:01:22 +0000
Manifest this update: Sat 14 Jun 2025 01:01:22 +0000
Manifest next update: Sun 15 Jun 2025 01:01:22 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: I6NOn6SKM10JV38tBxRC2Hkz627ucN5PGgO00wAVYq0=)
2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:9c:3e:aa:dc:bc:67:83:5c:b8:cd:5f:f7:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Jun 14 01:01:22 2025 GMT
Not After : Jun 15 01:01:22 2025 GMT
Subject: CN=951469be07ae9b09174f39c7e54709a0fb3c0d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:24:6f:11:f0:ab:7d:3b:f6:a8:c9:80:d6:
0a:4f:9f:6f:4d:50:52:80:15:b6:e3:3b:fd:20:32:
14:43:29:f1:16:f1:33:00:7c:70:df:03:0f:88:dc:
e2:bc:25:bd:83:94:c4:5e:60:4f:62:34:87:e8:c9:
57:22:50:88:6b:b7:af:98:37:77:35:6a:a5:e3:94:
7a:36:9a:88:97:06:d1:30:6e:16:ef:70:41:a7:61:
df:4c:4c:3e:57:cd:be:dc:2c:d0:2a:74:8f:d7:dd:
0d:75:c1:5a:94:0d:a8:e9:38:99:8b:54:90:dd:63:
66:bf:e8:d0:0f:99:78:e2:53:78:88:fb:4b:ac:b4:
ee:a8:4f:39:ad:d2:c9:2a:4c:ee:75:96:f0:9e:41:
bc:d9:5c:af:4c:b1:ee:54:81:34:de:b5:6e:f3:f5:
69:d9:47:0b:77:06:be:13:cb:02:6b:db:5e:3a:e5:
ad:7a:e2:00:c2:45:e8:db:51:dd:c8:1e:91:c4:7b:
ac:39:3d:e4:80:76:7e:11:2e:f4:f4:9d:e8:f9:6f:
0f:f7:5c:ee:24:62:6a:71:6b:7f:00:39:4d:00:28:
80:e0:26:80:10:e1:5e:0a:4c:b1:4b:f3:db:29:73:
6b:e1:42:c6:1a:fc:78:14:68:ef:2f:49:ba:eb:10:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:14:69:BE:07:AE:9B:09:17:4F:39:C7:E5:47:09:A0:FB:3C:0D:2D
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:47:1a:1c:42:c9:3d:55:44:ac:5b:45:30:43:c6:36:59:
b5:bb:4d:0d:2c:ff:3e:91:a5:de:6c:7b:9d:11:c2:8f:c5:3e:
00:ce:41:e4:f7:3c:42:df:f3:25:12:b4:cd:a0:38:44:3d:43:
45:b6:76:0a:5f:4d:41:77:2d:f1:b5:90:11:8b:e4:5f:2b:eb:
59:38:91:ea:68:f8:25:4b:5a:00:5f:7c:50:bd:ca:51:87:90:
2e:24:32:43:1f:df:47:c5:28:d0:7a:48:11:06:fa:83:e0:b9:
99:a7:e4:48:c0:ea:c9:dd:7a:c4:12:42:1a:57:69:db:30:b8:
93:ab:4a:01:95:20:4f:96:17:45:0a:11:51:e0:d5:29:0d:e2:
ec:c9:2c:56:10:7e:7b:fa:9b:5c:71:d3:15:f5:ea:a2:92:b8:
4c:5d:b3:81:a8:3d:e5:a9:36:6e:d1:5d:47:af:cf:bc:58:a0:
9d:3e:dc:54:46:a9:36:6e:1c:81:89:d2:97:84:34:9d:b8:6b:
44:09:4d:68:aa:7f:35:35:ff:5f:86:fc:4c:e3:1e:68:f7:d9:
3b:9e:3a:2e:5b:5c:85:f6:85:48:9a:84:f1:31:52:17:c1:41:
f2:c8:83:6f:0d:dd:d5:4d:15:63:6c:9d:c9:af:8a:53:e4:32:
94:e7:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:39:04 2025 by rpki-client