Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File: JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier: CS927wzZSZIN0is6UhWXq0eGzIhAFzjQ1tyiYKJ/X/g=
Subject key identifier: 18:AA:5B:A2:9D:EF:D2:3E:96:21:91:99:52:9F:DC:CC:B9:3E:21:E9
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 0198A0BB71328DF77F4DA322EA0FE4DD7CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number: 0D8D
Signing time: Wed 13 Aug 2025 00:01:35 +0000
Manifest this update: Wed 13 Aug 2025 00:01:35 +0000
Manifest next update: Thu 14 Aug 2025 00:01:35 +0000
Files and hashes: 1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: Qws/rYwwRA8y+jtJCFQnXZgFNM/aytfB81yoqYNNZe4=)
2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:71:32:8d:f7:7f:4d:a3:22:ea:0f:e4:dd:7c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Aug 13 00:01:35 2025 GMT
Not After : Aug 14 00:01:35 2025 GMT
Subject: CN=18aa5ba29defd23e96219199529fdcccb93e21e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:d7:0d:2f:aa:f8:1e:33:d6:32:f8:89:23:
36:f9:c8:3b:1a:07:4c:be:d6:a8:aa:89:e1:80:9a:
28:9d:87:14:25:c8:a4:53:00:44:5d:dc:a5:b2:1b:
5f:d7:ef:5f:97:67:d8:9a:03:c0:44:bf:bd:56:83:
c4:51:6e:44:86:75:c5:57:5d:38:0b:e1:07:aa:e8:
4a:d8:10:48:36:78:c7:00:73:c2:b6:23:26:5f:11:
b9:ed:f8:4e:d2:12:0a:9b:de:cc:3b:e4:d0:aa:7b:
c8:fb:69:48:5f:24:d8:ca:cd:a0:35:0b:c9:aa:46:
33:1e:81:b6:f8:ce:96:31:b5:94:57:38:88:81:77:
0a:c8:ba:df:21:0b:30:e9:b5:8e:76:9d:ef:24:08:
b8:01:45:96:52:b2:84:80:45:b7:4a:ba:0e:8c:75:
9c:ec:ad:10:a2:56:fc:6c:fa:e8:89:0a:86:d7:89:
14:39:79:99:e1:d3:b1:c7:7b:d9:79:59:ea:b6:d3:
f8:5f:b2:e6:9e:d8:92:55:54:7b:67:45:7e:4e:b3:
11:93:f9:2a:fa:b6:fe:03:e1:60:0a:64:38:42:ca:
35:1f:f8:7f:b4:3a:5a:69:43:8c:73:e4:df:46:83:
eb:57:0a:f3:f2:2a:fd:31:db:a7:fb:06:2c:47:b7:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:5B:A2:9D:EF:D2:3E:96:21:91:99:52:9F:DC:CC:B9:3E:21:E9
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:3e:0d:3e:66:87:e2:9f:a6:65:7e:9f:1e:34:23:e1:52:
ff:60:69:ea:02:cc:3c:fb:4a:bb:52:07:22:18:33:28:10:5a:
12:12:b0:3f:3b:3e:58:4f:7c:08:68:ad:1c:6e:eb:2b:4c:89:
d6:75:70:6a:c1:6c:bd:30:bc:fd:ca:c8:d9:b3:77:55:50:fa:
9b:af:c5:2b:fb:0f:24:13:f4:d3:0b:1b:02:4a:f4:8c:8a:d7:
1e:44:0a:38:48:2a:82:5c:37:fc:8a:06:bb:9f:fc:23:aa:53:
db:63:88:01:9f:27:80:14:14:c2:b2:b3:f8:6d:3a:ed:54:bf:
26:75:20:11:4e:5a:c0:e7:d6:df:a0:10:ef:d9:89:a2:83:86:
5d:a2:17:df:98:e4:46:ae:ff:53:f8:a8:26:11:74:9a:b1:cc:
97:63:b2:45:39:bb:c7:d6:26:65:1b:fd:2a:76:aa:e2:5d:90:
2f:86:a7:57:e1:dc:b4:7b:66:08:bc:20:21:02:20:f1:42:27:
73:a6:5e:b9:f6:e9:39:35:d0:bb:aa:c6:ed:36:4a:9a:dc:9e:
98:ab:3b:0c:03:82:81:de:b9:db:4f:56:01:f0:d1:cd:a6:1d:
de:d8:9c:ee:56:91:e0:35:91:71:05:52:31:d5:f1:9e:22:73:
bb:bb:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:55:10 2025 by rpki-client