Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: I3I3llQ+2ru8ZakfjdH1vB+qz5Ka/7RnHqaPxRZJBek=
Subject key identifier: B0:D7:4E:82:77:02:71:96:CC:95:24:B1:03:07:1F:B5:15:C3:E1:9B
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 0198733D9B503AAF191369FB937E82B46FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 15ED
Signing time: Mon 04 Aug 2025 04:01:13 +0000
Manifest this update: Mon 04 Aug 2025 04:01:13 +0000
Manifest next update: Tue 05 Aug 2025 04:01:13 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: 5yt/8oE8VV0JHkZ1WBG63jwFbZspSbOk8QdHdIfieUM=)
2: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (hash: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:9b:50:3a:af:19:13:69:fb:93:7e:82:b4:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Aug 4 04:01:13 2025 GMT
Not After : Aug 5 04:01:13 2025 GMT
Subject: CN=b0d74e8277027196cc9524b103071fb515c3e19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:49:bc:c9:b2:e2:70:a1:69:76:ca:12:8e:
44:59:ab:1a:21:3a:e4:bc:d5:3a:fd:82:9c:fe:30:
13:c3:85:50:81:db:60:cf:12:db:a9:00:54:b8:8e:
1a:de:85:18:7a:37:15:18:5f:fa:63:53:d7:bd:aa:
2e:de:51:6d:b8:c4:9c:f5:59:40:2a:6e:a6:f6:a0:
5e:a0:4d:0b:e9:07:23:7a:54:f8:93:4b:de:89:58:
28:b0:17:6f:57:f1:ea:32:31:df:e3:0c:09:5e:93:
15:8b:89:13:cb:ea:bd:30:d9:dd:47:8e:68:34:2a:
c2:1c:41:7c:d2:1a:ce:79:be:7e:52:72:25:d2:e9:
80:e1:26:e3:08:ed:37:70:ee:40:37:ed:2a:7c:c3:
9f:5a:d1:c7:fc:ee:4f:79:69:7a:b8:2e:36:76:24:
66:40:ec:f3:74:73:c8:76:b9:47:b1:0d:07:55:35:
3c:1a:49:7a:34:61:1d:40:b8:74:8c:2a:1d:b1:81:
37:8f:6e:b1:cd:7e:71:08:be:3a:5d:75:b9:4c:f6:
48:4a:c9:ab:e0:e9:50:8b:e8:2f:59:f6:fd:25:2d:
0e:fa:3b:89:d7:76:74:15:f0:22:44:f1:f8:f4:71:
93:e2:3e:2e:f4:80:e1:73:25:8c:22:1e:a8:f3:71:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:4E:82:77:02:71:96:CC:95:24:B1:03:07:1F:B5:15:C3:E1:9B
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:71:44:3c:45:87:5b:16:01:e6:7c:bb:5d:44:e4:eb:7c:e9:
45:45:d3:10:b7:80:09:3d:08:e5:b7:d9:36:4f:70:3f:bc:c9:
85:78:39:21:f7:66:48:10:72:b3:a6:00:7f:97:93:2f:c9:36:
60:c9:16:87:1b:78:81:b1:fb:94:e1:6e:9f:ab:52:02:bd:d5:
61:af:70:08:ac:66:f5:31:de:51:dd:7b:8b:61:1a:9e:20:18:
3e:58:9c:fd:37:0a:46:0d:0e:9c:87:22:b4:9b:37:38:e3:dc:
20:ca:8d:15:ba:69:54:19:ec:e8:2f:e1:08:2b:dc:7e:19:34:
da:f6:86:39:e0:32:3f:a8:d4:15:ed:e9:86:70:c8:cd:06:07:
7b:4e:d8:24:a1:a6:4d:3b:3d:ac:30:9d:f9:49:35:48:33:3f:
77:73:2a:a4:94:32:fe:c6:3c:41:4f:c2:d0:aa:e3:f7:64:12:
83:07:ad:3b:27:22:23:f9:39:64:20:c1:0f:67:d8:9e:d5:55:
a2:94:92:33:61:27:fb:62:4b:14:3a:74:df:7b:26:25:8b:f6:
82:3f:2a:3f:49:99:a4:8d:f0:8f:28:54:bc:14:32:55:86:20:
f5:55:f9:93:46:ab:b3:77:75:3b:ea:ac:2c:3f:fa:6e:ca:0c:
8f:86:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:05 2025 by rpki-client