Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File: jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier: KHY+kR0VY/zTdo26Db1p6wM2CPKntsT9i/uxoT74Rak=
Subject key identifier: 98:AF:6A:41:F5:6A:E3:F3:60:93:49:C2:B0:68:F7:B3:39:DD:69:4A
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 01974A7B112D42785A21890660AE04BEA422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:08 +0000
Manifest this update: Sat 07 Jun 2025 13:01:08 +0000
Manifest next update: Sun 08 Jun 2025 13:01:08 +0000
Files and hashes: 1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: KcYpn7dmO07Ecgw4m6SGPqL9pcm1gIjD/YQXAWElgF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:11:2d:42:78:5a:21:89:06:60:ae:04:be:a4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: Jun 7 13:01:08 2025 GMT
Not After : Jun 8 13:01:08 2025 GMT
Subject: CN=98af6a41f56ae3f3609349c2b068f7b339dd694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:72:ca:ae:05:e5:e3:fd:92:02:ab:04:de:
62:b1:15:9e:4d:3c:4f:bc:6a:b3:1c:25:bb:e7:85:
1c:84:ee:36:53:b2:e4:88:aa:8d:fb:09:ae:f3:42:
dc:82:9a:d7:de:c3:53:23:15:ea:ac:29:88:6f:90:
cd:c8:04:60:6c:fc:02:07:a1:08:96:91:5b:8f:91:
6a:90:7a:52:14:5a:22:3e:b0:41:84:2d:9a:c2:75:
43:0a:ff:37:40:83:ad:cd:61:2f:36:e6:f3:9a:36:
b2:fc:13:02:0d:cb:32:19:91:12:19:c5:d5:d2:11:
d5:6b:65:cf:2f:e9:3a:ee:5d:63:31:ad:40:70:4e:
f3:e5:3a:54:3b:82:30:fa:8b:3c:30:98:9d:02:21:
a2:02:a3:39:c7:87:83:8b:5a:28:0e:7a:26:e2:7b:
a3:e4:16:cc:82:f6:93:48:16:e6:e3:5e:bb:f2:84:
ba:4c:55:44:a0:27:35:68:53:02:4a:2f:bd:3a:13:
4b:d6:7b:f7:f4:c4:6a:50:ec:cd:6a:43:e3:7e:24:
8a:bb:d4:2c:4c:92:17:72:1e:ac:a9:f9:53:b4:a9:
e5:70:37:34:53:5b:55:fc:d1:73:48:94:38:0c:1a:
b1:5a:5f:ae:f4:78:48:d1:93:41:1e:20:55:b8:95:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:6A:41:F5:6A:E3:F3:60:93:49:C2:B0:68:F7:B3:39:DD:69:4A
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b2:82:68:96:bc:ae:20:f4:df:70:7c:b5:59:a2:f3:c6:f0:
0d:4d:d6:16:d5:a3:98:c3:be:50:d4:50:e7:0c:b4:68:38:3a:
cd:c7:fa:4d:0a:eb:ea:bc:69:aa:44:a7:5e:b6:0c:51:02:ba:
93:ed:0d:22:dc:e1:19:f4:7a:08:01:36:47:02:13:58:b8:e6:
d0:bb:d0:29:56:ba:c5:b7:bd:3d:f2:fe:a8:9b:05:ee:9b:fd:
8e:28:4a:80:8e:f1:93:8b:96:75:fe:1b:d7:98:a6:19:52:16:
65:27:c8:7b:a8:b4:02:b8:b7:86:52:d6:a6:7f:0d:bd:27:65:
25:53:d3:d0:bf:00:32:70:1b:41:2e:70:a4:93:10:ac:3f:6d:
1e:8d:81:6e:63:f4:9d:71:05:df:66:14:a4:bd:ae:33:e5:33:
81:da:04:e4:1d:cd:d9:c8:54:23:c6:e4:b8:f5:b1:c8:57:73:
42:f0:9d:6c:ca:b8:e5:a2:78:6a:ae:8f:ec:a9:cc:ef:eb:cc:
9e:01:d8:c6:0e:37:2b:31:d8:5c:3c:d0:47:82:c8:b6:84:97:
85:8d:d9:9f:89:6f:81:93:e4:ed:8b:41:65:99:61:0e:ad:d8:
e1:19:fb:b7:6d:ec:9e:d9:0a:df:5c:82:a2:1a:57:36:18:65:
fa:27:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:07:46 2025 by rpki-client