Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: SVg2prjhdiZVNLbRgFbAyI79lmeEFxTPst+vMfsCKzI=
Subject key identifier: 9D:48:D5:78:27:27:D7:FE:75:3E:87:4D:1E:BD:18:F4:07:1D:7F:C1
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 01984B547EE1AD64889C62D9BA728790E1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 10:01:25 +0000
Manifest this update: Sun 27 Jul 2025 10:01:25 +0000
Manifest next update: Mon 28 Jul 2025 10:01:25 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: EEskHjn7o2rBYDNsZmiIMxLe3Iqi5qlQwby8HEBek1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:7e:e1:ad:64:88:9c:62:d9:ba:72:87:90:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Jul 27 10:01:25 2025 GMT
Not After : Jul 28 10:01:25 2025 GMT
Subject: CN=9d48d5782727d7fe753e874d1ebd18f4071d7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:1e:a1:8d:a4:43:f1:00:51:67:81:b5:fe:
e6:0f:a4:b2:84:d8:5a:9e:15:d7:0b:43:23:54:99:
46:53:f7:1d:d8:b4:b3:c4:bb:a8:7c:63:24:2a:e5:
b2:c7:c5:0d:46:e1:b0:28:a8:2d:d8:e4:01:74:2a:
23:a0:65:1f:29:34:d9:94:3b:e1:c4:0d:2b:c2:66:
df:20:46:7b:30:81:8b:57:e3:e6:3a:52:5d:40:85:
c8:ed:13:ce:5b:54:02:51:65:8e:49:94:7b:93:12:
d2:72:23:ae:ee:70:61:7a:ed:8c:54:fb:99:c3:fa:
ea:10:05:0a:17:a4:75:47:1d:1a:3f:68:c0:74:dc:
11:12:81:3a:19:02:13:64:b4:93:0d:77:c5:b7:ae:
81:94:8f:ce:a8:c8:87:6f:24:97:9f:52:e6:9a:c2:
69:24:e1:40:ac:da:a5:7b:d2:22:da:9a:a7:3b:40:
3b:66:68:eb:c3:c1:f9:80:2f:8d:1d:5f:48:4b:d1:
f9:3b:59:58:9e:a3:05:27:8b:c2:62:7e:42:aa:43:
9e:b3:75:96:a8:2a:f7:6e:5b:9f:0d:92:71:f4:54:
1b:17:0a:eb:73:d7:95:07:28:2e:11:5e:cc:f6:e0:
32:df:97:3d:23:dc:6d:5b:b9:b9:8a:97:eb:48:61:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:D5:78:27:27:D7:FE:75:3E:87:4D:1E:BD:18:F4:07:1D:7F:C1
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:27:7d:c9:ec:8a:80:7b:61:d5:4c:31:19:dd:1f:65:88:1f:
1f:79:8b:e6:81:88:fd:68:e2:5d:50:39:da:c8:23:b8:77:70:
02:2c:fe:46:71:94:11:e4:b9:22:1b:c9:ed:d5:51:95:34:2d:
b4:22:e1:7a:12:01:d9:37:ee:ee:b4:70:5e:c1:80:88:f2:78:
4a:8c:4e:51:6f:18:67:5b:dd:1d:e4:2a:66:f6:56:5c:2b:0e:
18:80:bf:99:89:62:50:21:75:bc:ad:6e:63:88:16:6a:53:21:
29:9a:30:8b:2d:4f:39:c3:cb:f8:58:c6:a8:6e:23:e3:c7:c3:
ef:fa:5e:45:81:98:41:48:27:dd:ec:6b:36:99:86:56:7e:c9:
58:03:6a:fd:a8:ce:62:7c:87:87:6f:23:89:47:2a:23:0f:2d:
17:65:a8:e2:c3:c1:0e:20:6f:0a:fb:f0:58:43:ba:62:42:36:
aa:96:20:e4:e3:bd:93:5e:41:04:91:89:00:93:66:30:05:6a:
f0:e1:e7:ba:bf:75:da:0c:1a:3c:4b:38:0c:01:fe:9c:84:6a:
bc:e7:67:6a:1a:18:46:0a:d6:72:31:a1:f3:ba:4b:e2:3c:4b:
eb:f5:cb:20:63:c1:c9:6c:bd:c5:5c:b6:c0:26:13:f1:e7:5e:
64:1f:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:20 2025 by rpki-client