Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: KLd0x8HeCBY86RyYJAJKpr8OGBNo/vBwXSvvvsQuYx0=
Subject key identifier: 98:87:22:0E:0F:02:C7:21:D3:84:71:DC:D4:53:7C:D8:2F:49:D7:AF
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 019681D991DA6035267AE542D0936FF8D358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 14:00:41 +0000
Manifest this update: Tue 29 Apr 2025 14:00:41 +0000
Manifest next update: Wed 30 Apr 2025 14:00:41 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: 0m9+U2tvMSXjML0FOE+5VxO8mu/OBDGJLKhTNcQ4/VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:91:da:60:35:26:7a:e5:42:d0:93:6f:f8:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Apr 29 14:00:41 2025 GMT
Not After : Apr 30 14:00:41 2025 GMT
Subject: CN=9887220e0f02c721d38471dcd4537cd82f49d7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:21:b1:b0:54:45:f2:a7:f0:7b:8c:7a:ce:
60:4a:43:e2:9f:73:47:0a:b5:37:b8:4e:91:5a:14:
7d:a3:b6:5e:94:5e:6d:92:b9:d4:80:b5:d9:c7:d6:
25:96:e7:d2:55:b6:59:12:51:a8:cd:65:d4:84:50:
01:c5:ec:da:bd:43:af:1f:31:d5:86:f8:72:96:9c:
bb:16:59:b8:6a:45:48:55:b0:49:40:a5:43:bc:33:
5b:81:50:4b:8d:f1:65:87:86:f5:9f:1a:9b:f9:ce:
26:3f:7a:7c:72:75:39:fa:5e:32:97:d9:ec:2a:c7:
48:95:e1:85:7b:62:91:88:15:9b:27:8a:16:ec:81:
96:93:69:a8:f6:d5:16:0e:91:90:1c:7b:36:5b:59:
33:ee:58:5a:1e:db:a8:e7:14:e8:f5:d8:47:4f:e3:
31:08:95:a6:b8:8c:b4:5b:29:c3:ca:79:89:72:4e:
35:43:e1:1d:c8:97:db:49:3a:d7:3e:89:0a:16:3e:
b0:21:ec:9f:c3:ce:e9:f5:a1:2a:f2:32:93:11:46:
a8:71:50:e8:ec:b7:b8:18:c3:b3:87:d1:46:90:94:
4e:af:3f:94:ae:32:d4:b4:8e:6d:55:36:2d:3a:d6:
75:bf:4c:f9:e2:e2:b8:32:1a:41:7c:84:52:06:20:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:22:0E:0F:02:C7:21:D3:84:71:DC:D4:53:7C:D8:2F:49:D7:AF
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:c8:f8:24:ad:a3:c4:db:92:9c:b3:a7:8a:6d:70:30:7f:
88:b8:44:15:40:00:d4:cf:ad:18:c6:7a:5f:10:da:26:f9:c5:
f4:76:9d:68:4c:5a:33:18:28:67:53:e1:ea:81:72:32:7f:06:
4b:c2:d7:f2:dc:6c:15:fe:c3:99:51:2f:55:b1:8d:fe:81:53:
68:4a:9b:11:4a:af:a5:0d:14:a9:95:48:0f:48:0e:d4:fc:a6:
27:7a:98:58:f0:c5:b2:1e:ff:0f:72:f5:90:76:98:95:32:02:
a8:66:07:52:2e:8d:62:38:e4:ca:e3:25:5f:85:87:a1:00:01:
2c:b6:ce:7b:dc:2f:30:f9:8c:de:af:93:f8:2f:9d:47:2e:1d:
92:ae:a1:8d:b8:42:c0:3e:10:3c:f7:30:0e:e9:3b:2a:10:f5:
9e:09:9f:ec:c5:60:ab:ea:7a:72:ff:79:12:9f:94:a5:89:5c:
10:a2:03:c8:4d:9a:76:9e:25:b3:b3:96:b8:17:d2:bd:f1:91:
fc:45:bb:21:cc:9c:9e:bd:df:a5:c4:17:5f:94:37:3f:f5:1d:
cb:b9:54:f8:8e:50:f8:b2:12:d8:ed:89:f6:38:b1:fa:98:b4:
ec:96:26:bb:17:ed:2b:33:ec:87:99:f5:19:93:47:0b:07:cb:
8f:c5:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:16:41 2025 by rpki-client