Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: F8r0BTiiINC6D4ZR6tWatEm3yq9UEchICqtk4Z79VgQ=
Subject key identifier: D5:8C:E8:01:9B:19:5B:FD:59:4F:88:49:34:CD:49:33:E7:8B:83:3B
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 01988B45E5C6F8C8417EB2E4F3BA696E461D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 20:01:10 +0000
Manifest this update: Fri 08 Aug 2025 20:01:10 +0000
Manifest next update: Sat 09 Aug 2025 20:01:10 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: m7+gq3mUhL8ohoK2ja9sMG8TaMOMtD2hXBOhTDL25aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:e5:c6:f8:c8:41:7e:b2:e4:f3:ba:69:6e:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Aug 8 20:01:10 2025 GMT
Not After : Aug 9 20:01:10 2025 GMT
Subject: CN=d58ce8019b195bfd594f884934cd4933e78b833b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:ed:bc:f5:92:d9:f4:35:1e:4a:71:3a:9f:
74:95:dc:48:df:a9:b1:99:08:c7:a3:ee:53:34:64:
f3:d5:65:21:58:d4:5a:9a:0e:8c:d0:85:2d:10:23:
61:d1:cc:22:4a:81:d9:71:f5:26:dc:91:de:e7:36:
09:02:f9:41:2c:1d:01:5f:b7:6a:34:3a:33:73:fb:
a3:20:1e:94:7f:29:c3:aa:cf:ba:b9:f9:d9:9e:ed:
48:24:09:5d:c8:39:20:25:68:d8:98:e1:97:8f:7d:
93:ed:db:f0:8b:1c:f0:ac:45:d0:37:01:da:12:a6:
99:bd:72:3c:ac:6a:bf:06:81:61:d4:f0:8e:ed:06:
5d:82:d5:8c:71:ee:0b:5a:5f:e1:a5:7b:d9:d8:a8:
2a:71:62:3b:02:40:2c:4f:7a:f4:ae:f9:09:7d:51:
b6:7d:55:1c:15:f6:bb:28:ba:ad:f1:e6:b6:a7:8b:
b1:59:31:63:34:78:1b:f2:25:81:c8:c2:9f:0b:45:
41:87:c1:33:3d:4b:eb:bb:6f:4d:cc:bc:5a:1f:fe:
43:1b:58:03:24:a4:e4:b3:d7:54:8a:4d:b5:18:e5:
3b:3b:92:79:d9:fe:4c:55:da:37:9e:a6:fd:65:46:
0b:21:86:d0:f4:27:b6:52:0a:ec:6f:aa:ea:54:65:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8C:E8:01:9B:19:5B:FD:59:4F:88:49:34:CD:49:33:E7:8B:83:3B
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:24:37:fe:b4:13:67:e6:75:8a:95:8f:05:80:d8:a2:da:
f7:b5:96:9b:42:40:4d:0f:97:9f:36:56:74:bb:db:54:bc:1c:
fe:16:85:7f:09:da:98:c8:74:d8:2c:3f:dd:b1:96:cf:3f:c3:
e7:38:a0:cb:19:0f:ca:71:c5:bf:66:65:b6:89:23:8d:f5:ca:
ea:08:c0:e9:7b:c5:d2:65:6f:46:6d:ea:06:81:50:eb:78:55:
c2:3f:6d:4d:d8:01:2a:d3:33:b4:ca:dd:b2:2c:44:f1:8f:05:
c9:58:de:2c:94:e7:8c:05:fe:ec:a8:94:45:02:1a:d0:2a:a3:
53:23:6d:24:35:f2:dd:48:03:46:76:97:7b:76:d9:5a:43:fb:
7e:8b:a3:29:d6:f3:fc:c0:20:58:77:21:51:f9:8e:1d:13:47:
d7:bd:57:9b:ff:37:bd:55:1c:5c:fb:1d:90:16:d3:12:d3:23:
d0:d6:d5:39:81:fe:c3:e0:4b:ea:17:79:dd:68:e3:bd:34:97:
b5:b9:41:66:77:90:43:74:5e:a5:fd:1a:69:ba:f2:a4:2c:08:
2e:f1:a7:76:48:0e:03:bd:23:57:75:4d:eb:08:98:d4:21:48:
02:33:05:82:2d:39:45:59:e3:43:23:01:7e:ef:56:77:5a:50:
4d:d1:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:37 2025 by rpki-client