Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: dUuS6Oc1VhusuoS85Y1ybONsEMS1GD4FBAGSJVtTHVQ=
Subject key identifier: 68:F6:DA:24:66:71:89:02:2B:6C:76:7D:5E:FC:11:0C:36:5F:6F:60
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0197684E36FE81B12A8A6EE2990368BC34B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0313
Signing time: Fri 13 Jun 2025 08:00:45 +0000
Manifest this update: Fri 13 Jun 2025 08:00:45 +0000
Manifest next update: Sat 14 Jun 2025 08:00:45 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: r6bcLEB+Ndd8qr4+4gBA+xN/5uw1iItscpm+PoozYVA=)
2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:36:fe:81:b1:2a:8a:6e:e2:99:03:68:bc:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Jun 13 08:00:45 2025 GMT
Not After : Jun 14 08:00:45 2025 GMT
Subject: CN=68f6da24667189022b6c767d5efc110c365f6f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:f9:b5:ae:7c:2a:3d:48:50:81:fa:d5:57:
35:e3:b0:6c:a3:ca:dd:89:97:bb:9d:87:da:49:2d:
b0:4e:e2:58:3a:ca:63:47:eb:4c:6a:ed:43:ab:a5:
84:76:ad:ff:f3:e0:74:fc:42:aa:1f:7e:75:fd:5b:
1e:33:23:be:14:72:f2:2b:73:73:5d:52:40:82:c4:
2c:40:b9:a4:78:03:80:06:60:9e:38:93:aa:c3:1d:
4c:9e:63:4c:c4:c5:af:dd:8a:14:09:46:2c:76:30:
22:74:1c:ac:30:1b:fc:d8:3a:0f:7e:fa:b3:aa:e8:
03:9a:6d:e1:08:10:f3:f2:d6:d2:b4:00:2d:08:0f:
51:f2:90:30:78:9d:29:40:b3:a6:2c:cd:bd:ab:28:
32:03:f5:db:46:d4:bc:90:e4:23:d3:07:f6:2e:28:
e5:63:da:c6:f4:e2:ea:1c:2b:f8:4d:a4:c4:5a:2e:
71:99:c8:5e:74:77:63:80:90:04:1b:20:db:fb:d6:
00:f7:e5:16:c5:cb:78:21:a8:f8:74:8e:e8:92:3d:
2d:bc:f4:25:65:fb:45:58:e8:01:2d:8a:69:05:8f:
1c:db:f8:6f:d1:94:74:d7:3f:dd:32:7a:24:88:5e:
91:a7:ea:d2:5d:01:a2:0e:a4:d9:7b:25:5c:ec:48:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:DA:24:66:71:89:02:2B:6C:76:7D:5E:FC:11:0C:36:5F:6F:60
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d4:89:3e:e3:fa:f0:86:a3:dd:34:9a:48:50:f7:f5:c2:f4:
1a:e0:a3:6a:d5:58:83:6d:f0:57:c1:3c:41:81:04:95:b7:58:
16:c2:fb:86:cb:06:c7:d2:58:7c:9e:54:31:d1:e2:8e:ad:44:
a9:d2:3a:79:6f:dd:a9:b0:1b:ba:c1:4d:9c:1f:16:e7:34:00:
77:80:dc:3d:d2:6c:43:01:5a:22:83:0f:2c:8e:f4:20:a7:63:
bb:a4:7d:3f:60:10:76:64:7f:aa:6e:0b:c3:ac:39:3b:80:ce:
fb:00:bf:0f:40:e9:02:d9:d0:60:bf:db:d0:b3:02:2b:72:cc:
18:00:9d:18:32:3b:f9:66:29:58:b7:cc:e9:7f:91:dd:aa:20:
9e:81:cd:45:e0:0c:ad:b8:f0:d4:df:09:94:b4:a3:fc:96:8d:
40:b1:7e:01:31:d1:67:dc:58:81:c2:f5:0d:fd:23:3c:55:ca:
25:85:f8:ac:61:d3:38:32:9b:25:57:d5:33:b8:a5:ef:c5:c2:
2f:b2:24:15:ad:b5:e5:49:ef:d2:f7:72:df:77:ad:07:a3:15:
ff:f7:49:9d:01:34:d8:3c:24:f1:b3:de:86:b8:ad:60:e5:dd:
ee:8e:67:f8:45:c5:6d:98:d1:25:32:b2:e1:c5:8e:a5:89:d1:
6e:ee:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:06 2025 by rpki-client