Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File: JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier: Yr/yz6FbfTW9uZGbojyjr2Z6rLad5nqhzJYMjtyRow0=
Subject key identifier: 0F:27:53:A8:BE:C2:CC:D4:46:FD:27:A6:2D:28:1C:21:9C:BD:96:ED
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 019788B52B405D5AC5CC13CC9CA0F27E3A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number: 0CFC
Signing time: Thu 19 Jun 2025 15:01:03 +0000
Manifest this update: Thu 19 Jun 2025 15:01:03 +0000
Manifest next update: Fri 20 Jun 2025 15:01:03 +0000
Files and hashes: 1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: Xz5E8qUtbPvFefkpxYUTVcuu2eAEMROqJQ+dormBIPY=)
2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b5:2b:40:5d:5a:c5:cc:13:cc:9c:a0:f2:7e:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Jun 19 15:01:03 2025 GMT
Not After : Jun 20 15:01:03 2025 GMT
Subject: CN=0f2753a8bec2ccd446fd27a62d281c219cbd96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:80:4c:51:99:c7:13:f2:0e:f3:2e:1e:2a:
9f:a1:a9:d7:eb:dd:68:b1:65:f9:55:9c:65:dc:fc:
c3:7b:91:27:6e:75:6d:11:12:bb:37:b0:b3:95:cb:
43:2d:c1:db:44:fb:48:10:94:5d:23:79:1b:06:33:
12:67:be:cb:61:62:11:e9:79:b1:31:73:89:25:63:
60:3d:39:92:bb:9b:35:91:34:89:d7:f9:45:52:b6:
30:8e:0b:27:48:7d:af:26:d9:6c:57:27:d5:43:63:
b4:ea:1c:71:52:f0:97:27:25:47:2f:1d:ab:ec:28:
9a:4a:12:ea:b8:44:8b:e7:d5:2e:36:b3:49:cb:92:
c8:c8:86:6f:fd:36:31:9d:ea:19:3e:f6:51:ad:40:
c0:07:4f:d9:5d:86:2a:2d:eb:1a:86:27:78:4b:f6:
ec:7f:8f:23:ea:82:fb:87:a6:63:6a:06:d1:e9:a6:
c9:04:56:81:a7:cd:17:9d:ad:72:c5:4e:f1:a0:4a:
ed:2e:e9:5b:51:2c:af:b7:87:80:f3:e1:a0:c9:99:
8c:cf:84:79:9a:0a:6f:18:b6:9e:a3:8e:db:9c:2d:
f1:a7:fd:11:87:52:44:22:ba:17:c7:3a:b6:60:a0:
06:a9:11:11:dc:17:aa:83:ea:52:45:8d:25:8f:30:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:53:A8:BE:C2:CC:D4:46:FD:27:A6:2D:28:1C:21:9C:BD:96:ED
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:a2:e5:6f:00:a3:63:2e:b4:76:4f:34:b5:e8:81:d8:84:
4a:bd:32:7f:f8:b2:26:a7:8c:d9:93:dc:bc:3d:77:db:a5:b6:
90:b9:e0:20:81:d0:07:00:3c:37:54:83:89:d2:ea:82:b4:19:
70:2b:7a:48:3c:a3:9d:6a:8d:dc:0e:25:4d:70:36:48:be:8f:
4a:25:93:92:19:3a:5b:e4:30:89:01:81:7b:63:73:f1:1c:ad:
ef:83:6f:6b:08:e8:11:7c:3e:3f:d8:e9:5b:03:92:b1:e4:af:
81:75:86:ca:63:85:f4:16:99:ba:4e:18:0b:07:04:55:fc:42:
39:16:07:93:c0:c6:41:28:8c:f5:7d:27:80:0a:52:8c:c2:bb:
6d:ae:83:d8:4d:26:df:44:83:58:bb:81:5e:fa:30:e8:57:d1:
02:a7:50:58:56:72:b8:f0:d2:d2:12:cd:e9:65:18:bd:47:ae:
94:be:04:49:9e:87:89:59:cd:d1:56:04:de:ab:7f:b2:a3:eb:
ab:8a:e5:e6:47:c7:d8:96:8f:a9:ad:85:44:8a:00:ad:00:ad:
fc:e4:85:9c:5e:a9:f3:af:f8:a9:fd:15:3c:a7:2b:02:6a:d1:
8c:24:95:0b:42:39:61:d9:6f:fe:52:17:c1:d2:50:c2:4a:fc:
31:be:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:21:28 2025 by rpki-client