Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: tZH8iIeMi9xBOG2V/DBhDwAZzWkdjZ947FhMpOVnI2s=
Subject key identifier: 8B:96:90:9B:14:FE:7E:04:E2:2F:F7:90:13:0C:FB:87:08:4B:9D:38
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0197876AFEE204DC8D5D67D2CF93267E59B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0D3D
Signing time: Thu 19 Jun 2025 09:00:25 +0000
Manifest this update: Thu 19 Jun 2025 09:00:25 +0000
Manifest next update: Fri 20 Jun 2025 09:00:25 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: 2nmYN/gudEk+Fd0uIaVXr3tBYYQ6hqZvDzRvTtySY6c=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:6a:fe:e2:04:dc:8d:5d:67:d2:cf:93:26:7e:59:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jun 19 09:00:25 2025 GMT
Not After : Jun 20 09:00:25 2025 GMT
Subject: CN=8b96909b14fe7e04e22ff790130cfb87084b9d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:56:a0:f9:0d:7f:a0:bc:41:53:b1:34:29:
0b:f1:d1:0b:b6:49:5d:3f:0f:6a:9c:fc:be:e9:52:
7f:8e:13:ac:5b:be:dc:0d:76:26:f8:d7:2a:f6:fd:
1d:a9:1a:b6:39:59:6f:93:65:2a:a9:b2:42:e8:42:
76:e7:e4:a5:55:a5:ab:42:e2:35:ee:82:fc:49:e1:
b0:40:62:2b:44:54:be:2a:68:0b:39:4e:60:cf:44:
9f:11:08:e6:7e:b3:0c:c0:58:b7:fd:38:5f:16:40:
e4:2e:4c:3b:25:89:25:d7:58:fb:6f:0a:ac:f9:c3:
87:39:cd:9c:6c:43:4a:70:70:fd:0a:49:61:8f:d3:
e6:50:80:13:b3:b4:ce:fa:75:ad:42:c9:56:9e:6e:
b0:35:7b:60:43:e6:a2:7f:61:6e:c0:18:a7:a3:42:
96:a0:fd:04:6c:c5:2f:c8:3a:b8:fa:48:2b:26:4f:
cc:ed:54:8c:ae:a8:d2:8a:db:5a:a7:8c:3f:1a:dd:
37:63:59:a7:23:6d:bd:e1:09:c7:bc:d1:e8:e5:39:
e2:63:a6:5e:28:e4:ab:75:31:41:7d:1e:41:00:74:
2c:c0:b1:c9:cd:ae:22:da:89:42:79:e9:63:ea:a6:
22:e6:62:7d:68:8f:fa:ea:f2:45:8c:3c:d2:64:08:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:90:9B:14:FE:7E:04:E2:2F:F7:90:13:0C:FB:87:08:4B:9D:38
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8e:9f:e2:1c:62:e8:0d:cf:51:cc:6c:45:01:6a:69:e6:03:
ec:42:9a:c8:37:ca:63:6e:49:49:a8:bc:41:4d:64:28:34:9d:
2d:74:f6:ad:73:1c:21:03:3d:a4:38:b3:f3:81:22:df:89:4e:
9c:6f:8f:8f:d0:fb:bf:7b:02:01:32:99:de:09:ff:25:5e:db:
d2:1c:61:92:d1:7f:d9:33:e2:99:b2:15:c2:c8:24:4b:a4:1c:
6a:44:ea:72:15:ef:44:1e:87:b9:a3:27:03:1a:af:07:58:95:
21:80:2c:b9:4b:50:ac:71:03:69:1e:d6:ef:02:81:fc:6e:3a:
76:e6:87:75:99:cb:e0:76:ba:56:51:3c:b3:4e:7a:0b:ea:39:
aa:f0:d7:e4:ba:c8:b1:c3:3d:55:aa:3c:95:32:de:eb:b4:8c:
c8:b0:90:13:06:87:48:4f:24:ce:ef:61:06:dd:93:be:21:c7:
b0:3b:f9:79:0d:09:a5:68:24:36:09:fc:be:71:c1:31:32:bd:
bd:20:50:2d:8d:e4:9c:99:90:1c:18:b1:8a:86:e9:53:14:14:
ac:6d:c1:36:91:ff:27:bd:9d:66:57:77:0e:52:6c:b9:6b:66:
03:b2:be:a7:88:18:64:f8:31:ad:50:c3:1d:f8:d1:d8:de:a5:
53:57:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:50:46 2025 by rpki-client