Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: zluXGqAAUT0rLyja2aVVJhK4mNSpXx9ezsLPJ516wi8=
Subject key identifier: 58:B5:ED:5D:CB:34:D2:17:AD:8B:C0:5B:40:73:3F:4A:15:0F:BB:78
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 019827EC78894BBD57161FC7440B9E2BDE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 1B
Signing time: Sun 20 Jul 2025 13:01:05 +0000
Manifest this update: Sun 20 Jul 2025 13:01:05 +0000
Manifest next update: Mon 21 Jul 2025 13:01:05 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: OHiRSSpvVO88sGxyUOxB9tnE5o1B6AoSN9RAW2geNXM=)
2: pZiY96ECGZ3enErASsqWJWksnRo.roa (hash: MEeiZ1S6byAdXpmL3x1KNRz/NrRtbh43pA6SZ1saEAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:78:89:4b:bd:57:16:1f:c7:44:0b:9e:2b:de:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Jul 20 13:01:05 2025 GMT
Not After : Jul 21 13:01:05 2025 GMT
Subject: CN=58b5ed5dcb34d217ad8bc05b40733f4a150fbb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:ef:13:79:71:37:6b:b7:83:20:47:7b:a3:
1f:0b:01:ff:ee:6a:93:30:af:c3:62:b2:b8:d9:8b:
f4:75:60:b5:d0:89:da:ef:7f:7f:fe:d6:84:7d:d2:
4b:8e:65:56:a7:82:ea:ca:b7:60:e5:53:7d:3f:e7:
19:73:98:30:88:0b:70:72:06:e6:cd:80:16:ed:88:
f2:30:1c:da:e3:91:84:3d:54:69:7e:5b:08:f4:b7:
bf:2f:78:1c:8c:2a:45:ef:dd:75:da:05:57:88:a2:
70:36:1c:3c:af:a2:eb:da:4f:d9:19:63:0e:b7:7c:
cf:5b:7e:29:9c:18:0c:af:8d:34:9e:a7:f2:0a:90:
1a:73:00:af:93:66:fc:14:7e:2d:80:7c:5c:26:7f:
e6:57:8e:27:4a:3e:41:2a:77:50:bb:da:44:e9:98:
60:57:92:28:79:cf:05:87:ec:34:12:e2:05:cb:c6:
b1:88:f2:1f:c9:67:f8:10:c1:0e:c9:23:66:ae:20:
cb:df:36:ad:85:23:18:35:41:2e:cf:98:b2:6f:9d:
b5:f9:e5:a8:61:b9:1e:f2:0a:59:ba:56:6e:31:76:
cf:72:5e:45:78:c1:4f:57:87:26:28:d0:be:e4:72:
54:d5:84:c0:fb:91:a0:0c:8d:6d:07:66:1c:e3:3d:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:ED:5D:CB:34:D2:17:AD:8B:C0:5B:40:73:3F:4A:15:0F:BB:78
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:62:6c:33:e4:5c:ec:19:bc:36:26:1d:6a:08:7c:61:df:
54:21:8e:55:dd:1f:60:5a:b4:3e:c3:d3:55:d6:35:25:c0:a2:
47:f9:67:3e:45:0b:3e:60:b6:90:7e:ed:51:34:5f:6b:58:4f:
65:f9:eb:30:56:ca:0b:d6:97:e3:a1:23:99:dd:aa:dc:e3:70:
49:73:33:46:4f:6a:2d:cb:c9:db:ad:67:b0:e2:de:5c:cd:4b:
75:6a:f2:c6:f0:62:7a:dd:ab:4c:cd:f5:3b:ba:fd:bb:80:b4:
73:42:72:c7:94:e9:b6:d9:28:dc:20:f9:82:bb:93:a2:b0:f2:
a7:21:3c:20:5d:2d:2d:3b:98:90:15:52:77:cc:76:e7:2e:f6:
a9:03:50:77:26:5e:f0:86:60:ca:b9:b1:db:c4:be:40:30:12:
62:57:8d:41:45:d1:b9:3f:fa:d5:6c:46:2e:79:3a:b2:33:61:
14:d4:e4:cf:04:b2:50:96:36:e6:85:b3:66:64:6c:89:e3:79:
d5:9c:ed:29:7a:83:1c:1c:4e:e8:dc:f2:b1:41:27:5d:5b:48:
8a:b1:df:3d:28:27:ee:1c:2b:77:a0:c8:ed:14:dd:eb:74:bf:
ba:e0:7c:d4:80:1c:db:df:e8:b1:5a:1b:b2:a1:5f:cb:da:7f:
c9:74:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:50:37 2025 by rpki-client