Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: 4IJTCVk5jXe+kK30WOPQ61xXofPtcF3KiTwqTxnKQiA=
Subject key identifier: A7:BB:22:17:46:14:0F:61:0F:B9:21:7E:EE:52:3A:CF:EE:E4:7B:33
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 01976F997E625D4F3D960433159765935D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:00:19 +0000
Manifest this update: Sat 14 Jun 2025 18:00:19 +0000
Manifest next update: Sun 15 Jun 2025 18:00:19 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: 7xFLYQpbFtsNSHph6Y6CR5e5fZ5PBkBMCIjMj+N2xLI=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:7e:62:5d:4f:3d:96:04:33:15:97:65:93:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Jun 14 18:00:19 2025 GMT
Not After : Jun 15 18:00:19 2025 GMT
Subject: CN=a7bb221746140f610fb9217eee523acfeee47b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:06:54:07:59:c4:0c:43:e7:18:9a:39:70:
31:ae:73:00:4b:b2:b8:0b:30:a9:2e:7c:78:1a:65:
45:d1:41:ad:74:36:47:6a:2e:c4:79:2c:66:c1:54:
d9:a6:d7:e9:1f:03:9f:7c:5b:0d:da:8b:64:47:96:
66:4e:0d:5c:eb:8f:93:45:83:01:4c:63:f1:6b:25:
c5:66:1f:39:07:60:07:91:9b:0f:11:79:3e:98:55:
dd:ed:9c:33:cd:fc:ce:33:44:ab:58:29:f1:08:37:
bf:32:11:88:b4:48:7f:52:81:9a:1c:b7:81:b6:a4:
49:08:bf:ec:aa:ad:b7:80:e5:e8:35:3c:33:37:f2:
ff:78:c0:16:1c:95:4d:e2:1d:2a:6a:49:03:a7:cd:
07:85:59:ae:79:6b:76:41:89:1d:f0:15:ca:eb:ea:
7e:dd:15:aa:bb:f6:8e:64:c3:c8:98:5e:e4:f7:18:
fc:a8:ce:4c:7c:78:2c:ca:f3:4a:7f:09:b7:2e:bd:
10:3c:ef:36:a4:28:76:b5:8e:9e:4a:e5:34:91:5f:
4a:a4:d6:4e:54:b4:de:19:51:48:30:3b:6e:6c:1e:
51:06:a2:5b:35:56:32:b9:16:6e:ca:2b:e2:02:a4:
7f:59:a2:15:5b:a8:e8:ca:3f:e3:5e:80:d0:3c:88:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:22:17:46:14:0F:61:0F:B9:21:7E:EE:52:3A:CF:EE:E4:7B:33
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c7:32:d5:a3:b6:12:09:65:b0:61:e8:a4:1b:b3:18:10:fe:
c2:b6:c0:ab:61:1a:c9:54:07:e2:1f:57:4a:83:e1:43:de:09:
78:73:36:21:71:67:f4:a4:29:e1:fb:cb:96:dd:1f:47:c4:a7:
6b:db:e8:51:2f:56:d6:b3:44:70:db:67:d4:ea:1d:33:32:b2:
f1:4f:8d:67:a0:06:bf:e5:42:c1:62:7f:62:16:14:88:f5:39:
d6:9f:be:c3:4e:54:29:1e:d2:2a:81:8f:a5:0e:07:e3:64:7c:
58:c7:8b:31:17:55:b7:4c:61:a2:78:ce:a9:e0:86:9c:64:58:
9b:f2:be:13:0f:c1:9d:b6:c7:b1:5f:d1:43:b4:28:90:ce:77:
f2:0d:25:51:24:da:ca:a0:d1:21:0a:0e:ea:4a:1a:7b:8d:51:
73:b1:60:9e:8e:b6:12:bb:90:d8:b2:d7:a2:81:e8:83:4f:9f:
2a:a8:00:b0:fe:dd:a2:9b:4d:29:d1:42:28:8b:cf:7c:e1:6a:
e9:a8:44:5d:c8:69:97:24:c1:02:6d:a6:5f:a1:a3:0d:49:7a:
7b:66:51:3c:34:b5:0e:84:d6:ae:b4:e0:35:56:8a:a3:ea:0f:
1f:4c:d6:4d:b7:30:e2:74:eb:98:f9:67:db:13:13:40:42:31:
30:a9:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:00 2025 by rpki-client