Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: KsRSr0WjPUfBs7JmKe/2mUBekQOeXmhX6OpMRa6uI4k=
Subject key identifier: A9:34:65:C7:29:F8:52:10:DB:B1:07:0E:5A:84:17:C3:8D:AD:C5:59
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019770755DA587FEE6300EEBAD0629E99359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 1148
Signing time: Sat 14 Jun 2025 22:00:29 +0000
Manifest this update: Sat 14 Jun 2025 22:00:29 +0000
Manifest next update: Sun 15 Jun 2025 22:00:29 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: djEekxwcPlkAllbtOCjsmYgBV2zwNeS5Yy9dQ7LF6SI=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:5d:a5:87:fe:e6:30:0e:eb:ad:06:29:e9:93:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jun 14 22:00:29 2025 GMT
Not After : Jun 15 22:00:29 2025 GMT
Subject: CN=a93465c729f85210dbb1070e5a8417c38dadc559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:3a:31:e6:0b:cd:01:9e:ab:59:d9:4d:79:
1d:56:0e:e1:ef:f1:f5:0b:52:a1:9b:99:c3:6d:6e:
11:ae:5a:37:bd:f7:86:c4:77:55:6d:1c:54:bd:3c:
3f:64:bb:af:6e:ad:b0:de:76:59:41:52:2b:fd:c5:
55:fb:2c:61:9f:c2:5a:b6:8f:37:89:55:2f:c3:45:
34:93:d3:b6:c0:aa:82:a0:af:1f:06:62:f1:f9:4e:
33:3f:49:d8:1f:22:5a:ac:92:bf:7e:4d:fd:a7:6a:
ff:59:b1:14:92:34:b0:36:1c:71:1b:32:7f:98:cf:
fe:fc:8e:91:a3:2f:d7:8f:b7:d1:d7:1a:73:f8:60:
8f:7d:62:61:11:1b:cc:57:e8:c8:33:00:f4:af:74:
5f:64:20:0f:e3:9b:b6:48:5f:67:37:0a:3c:75:f5:
74:b4:37:8d:8f:eb:03:0b:84:bb:8f:0e:2b:31:7e:
54:e3:68:0f:b9:fc:6e:ab:3f:0c:e5:88:51:2e:eb:
fc:48:cd:35:5a:12:f8:28:11:ea:14:cb:b3:f3:bf:
d9:c4:d6:e9:bd:7f:7a:5e:43:78:a5:1d:c5:1a:78:
17:76:dd:0d:86:f7:08:0e:7e:ca:fa:a8:2d:3a:ca:
e2:9f:71:c1:e8:b4:ad:d1:f2:18:1f:9d:41:95:41:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:65:C7:29:F8:52:10:DB:B1:07:0E:5A:84:17:C3:8D:AD:C5:59
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ec:51:a6:de:61:b8:bd:3f:14:91:0e:42:61:92:11:04:bc:
3c:5f:10:68:a5:29:2e:b5:9a:ef:c5:86:92:cd:99:fa:ff:ef:
c0:f4:a5:06:4f:4e:8f:8b:db:96:49:d6:39:6a:cb:21:0d:eb:
fa:d7:cc:93:7e:e4:34:5e:48:66:d2:83:a7:8b:72:97:de:8c:
fa:ce:bd:55:a7:c5:80:c0:e9:b2:5a:9d:c4:a2:ca:12:10:01:
3b:8d:f9:eb:e4:fa:1d:d4:45:3d:bd:6a:19:72:4c:99:b4:0e:
96:4a:84:40:b9:63:60:84:e5:53:8a:bd:2e:10:ca:c9:ff:05:
c9:ad:6a:d4:36:9b:3c:c7:de:0a:e7:43:b4:70:5f:f7:41:fd:
c8:87:83:86:64:5f:49:d6:ed:b6:f7:2f:d2:ab:5c:6d:27:ef:
98:eb:36:34:2e:6e:ea:94:54:ff:28:38:9b:e2:df:bf:9b:40:
d8:39:18:c2:8f:98:72:1e:49:83:9e:dd:b9:ae:e2:c1:22:f6:
b8:79:d6:11:0e:b2:4c:68:28:1b:f4:46:7f:e8:b8:1b:5c:1f:
03:6d:0f:58:a4:05:e3:d9:63:00:82:cf:58:52:b6:03:89:ea:
4a:e8:f1:66:8b:f3:77:31:7f:33:2f:86:2f:07:3a:27:20:53:
99:f1:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:30 2025 by rpki-client