Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: jvg37rzB6/NVpsl2z67yBkvDJJZ91Q4ksjeGgxAj5f4=
Subject key identifier: 7C:A9:39:C4:5D:CF:98:E1:D8:6A:C5:FE:1E:40:33:86:61:44:61:BB
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019783C5B070CF553AACBE56BAE7C92F8490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 12F6
Signing time: Wed 18 Jun 2025 16:01:00 +0000
Manifest this update: Wed 18 Jun 2025 16:01:00 +0000
Manifest next update: Thu 19 Jun 2025 16:01:00 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: y5jtD1DbeXLu5VTyKBDuJqbrEc4hYpkf6uFBTbI+9iA=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:b0:70:cf:55:3a:ac:be:56:ba:e7:c9:2f:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jun 18 16:01:00 2025 GMT
Not After : Jun 19 16:01:00 2025 GMT
Subject: CN=7ca939c45dcf98e1d86ac5fe1e403386614461bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:cd:68:45:94:a8:87:54:48:a8:8c:80:5c:
11:f4:12:55:af:ad:ee:ba:09:9a:0c:19:40:d3:b9:
6d:cc:49:0f:7d:92:be:13:e4:cc:bf:57:e4:2a:ce:
81:52:2e:81:6a:33:86:c5:da:4d:01:18:9f:13:16:
6a:54:ad:7e:90:1e:cf:a8:e7:38:fd:49:61:80:dd:
9c:56:d4:71:c3:c8:ed:c2:5e:ae:87:3d:eb:9e:d7:
57:49:37:9d:3e:78:1a:1a:f6:09:be:f4:06:5a:13:
b7:b6:c7:be:55:0b:ce:1b:83:27:09:60:ea:3c:6b:
0b:c8:4e:50:c1:16:ab:28:9a:1f:5d:50:a2:54:ef:
d8:cb:2f:b5:8c:8e:3b:53:ea:da:9f:44:8d:08:05:
f1:2e:7c:fe:07:4e:cf:6e:c5:38:22:c6:e0:e6:ab:
b6:ac:a7:b1:af:df:0c:b9:e8:28:b7:ce:f5:6e:f9:
a3:53:04:69:96:66:7c:83:c0:64:1a:f3:af:0c:d4:
12:3a:c0:82:6a:22:b7:16:93:3f:17:36:96:7b:9d:
b5:76:9e:46:14:85:9a:ed:a7:c8:09:a4:ea:ae:05:
17:9a:a4:c4:7f:81:70:d8:c4:fb:5e:cc:85:e9:e8:
b9:91:63:33:20:62:13:0b:ff:a9:ae:1b:2c:3e:e2:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:39:C4:5D:CF:98:E1:D8:6A:C5:FE:1E:40:33:86:61:44:61:BB
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:2e:42:d2:d7:22:dd:8c:6f:b8:24:ee:79:dd:7c:09:60:
fb:18:7f:e7:06:ea:c1:90:13:e2:44:b8:33:c3:10:9e:76:0c:
5e:eb:44:4e:d9:bf:1c:bc:87:25:d6:18:9e:b5:b1:7f:b6:79:
8d:8e:46:6c:ed:82:bd:3a:f5:f3:dc:42:61:b2:b0:0c:d6:ec:
fe:44:af:fa:ab:ce:dc:e8:c8:54:90:d7:0d:ef:cb:13:a0:71:
69:26:d7:ff:40:75:80:bb:9c:ad:76:03:0e:76:1c:08:9b:52:
0e:47:3d:32:c8:0e:14:95:a2:18:88:30:c1:aa:10:d1:1c:f1:
ac:b1:3d:b2:38:e4:bc:ef:8e:86:9e:11:cb:a6:a6:94:c1:11:
d1:49:8d:09:0b:3b:e4:41:d8:c1:c6:8d:a3:d5:60:df:c1:96:
8c:2a:59:75:7c:3d:a3:ee:c3:1e:18:25:aa:9b:cb:57:1e:b8:
70:0f:1c:6a:c2:02:74:53:a0:ca:cb:41:41:b4:96:bc:9d:a3:
a1:7d:b1:90:5f:26:42:20:e4:34:cc:b1:29:8c:ae:ba:bf:a9:
8f:cc:4f:ed:45:65:b4:21:fe:fa:24:e4:71:35:fb:44:d9:0d:
ff:5c:1c:0d:56:aa:4e:ac:16:4f:e3:f2:45:ca:bf:5c:b2:cc:
cb:d7:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:45:58 2025 by rpki-client